last executing test programs: 46.564975111s ago: executing program 1 (id=13726): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000047ebf8e1b81e8c141500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c07e8fe55a1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000040000000000", 0x5dc}], 0x1}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x11, 0x3, 0x0) write$cgroup_pid(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x3, 0x73) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000000180)=0x586045e2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00d3ff71ef288563"], 0xffdd) 42.914027252s ago: executing program 1 (id=13730): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000540)=r1, 0x4) 42.913353032s ago: executing program 2 (id=13731): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), 0x42) openat$cgroup(0xffffffffffffffff, &(0x7f0000001c00)='syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x5e}, @struct={0x6, 0x6, 0x0, 0x4, 0x0, 0x8000, [{0x8, 0x0, 0x1}, {0xb, 0x4, 0x7}, {0x2, 0x1, 0x5}, {0x3, 0x2, 0x9}, {0x5, 0x3, 0x80}, {0x2, 0x0, 0x2}]}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @type_tag={0xffff0001, 0x0, 0x0, 0x12, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x4b, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000001e00)=""/130, 0xa7, 0x82, 0x0, 0x8000, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x5}, 0x8) getpid() 42.856856461s ago: executing program 0 (id=13734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r0, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r9, 0x5452, &(0x7f00000013c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@func={0x4c2, 0x0, 0x0, 0xc, 0x4}, @typedef={0x4}, @typedef={0xd, 0x0, 0x0, 0x8, 0x3}, @struct={0x7, 0x3, 0x0, 0x4, 0x0, 0x5, [{0x8, 0x0, 0x881}, {0x3, 0x0, 0x5a}, {0xa, 0x2, 0x6}]}, @float={0xa, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0x9, 0x4}, {0xe, 0x3}]}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @fwd={0x7}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x2}, {0x4, 0x1}, {0xe, 0x1}, {0x4, 0x5}, {0xa, 0x2}, {0x6, 0x5}, {0xd, 0x3}]}]}, {0x0, [0x30]}}, &(0x7f00000008c0)=""/11, 0xfb, 0xb, 0x1}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x12, 0x0, 0x0, 0x406}, 0x40020000) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000200)={r8, r0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) 42.810175479s ago: executing program 2 (id=13736): perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x7, 0xfb, 0x7, 0xca, 0x0, 0x9, 0x10, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000240), 0xf}, 0x0, 0xfff, 0x8000000, 0x8, 0xffffffffffffffd2, 0x7, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000003000000090000000000000202000000000000000000000200000000090000000000000a01000000090000000000001102000000ffffffff000000000000000300000000020000000400000001000000002000"], &(0x7f00000000c0)=""/29, 0x67, 0x1d, 0x1, 0x1}, 0x28) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x10000000001, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8000, 0xa6d}, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf942071763", 0x5a}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000040), 0x4) recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@ax25={{0x3, @default}, [@rose, @rose, @remote, @remote, @remote, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000001780)=[{0x0}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000013c0)=""/244, 0xf4}, {0x0}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/214, 0xd6}, {0x0}], 0x8, &(0x7f0000001800)=""/148, 0x94}, 0x2) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x1000, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="e7c80000000000000000000000000000000000008f6967c862bf99880afae09044ce37de0feac7e1d39b77762f9fa5b012dbf9d9ec453a60fde9e29558b37a7cf158872c851733de50cb6e479f82fa2c09a7ca09b0e0e30afc5645040340127a6a02dbf4000a061ecf2963722caee3224c05b530ffa5dce91e0ac8c487fdd9dd79c94c8b138887c81fdf2b988bc5bd75df7897c7b955fd3fd79eff517b3adf5acce998", @ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="02000000040000000400"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, r0, 0x8, &(0x7f0000000000)={0x10000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10, 0xffffffffffffffff}, 0x94) 42.74364693s ago: executing program 3 (id=13737): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @remote}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a5ded7e4f9f680e865698", 0xffffffffffffff96}], 0x1}, 0x20000080) 42.303261364s ago: executing program 0 (id=13738): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000780)}, 0x4008844) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80110, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x5d}, 0x0, 0xca, 0x0, 0x4, 0x3, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() close(0xffffffffffffffff) openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x80) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) sendmsg$tipc(r6, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x0) mkdirat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x1ff) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1803000000000000000000000000000085100000060000001800000000000000000018000000000000200000000000000000950000000000000004030000040000009500"/88], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8b30, &(0x7f0000000240)={'wlan1\x00', @multicast}) 42.302553464s ago: executing program 1 (id=13739): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000047ebf8e1b81e8c141500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c07e8fe55a1040008400100142603600e120800060000000401a80008000800104003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c0800000009000000000000000000000000040000000000", 0x5dc}], 0x1}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x11, 0x3, 0x0) write$cgroup_pid(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x73) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000000180)=0x586045e2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00d3ff71ef288563"], 0xffdd) 42.298512304s ago: executing program 3 (id=13740): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008801c00000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0b", 0xcb}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xfc, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x8b401, 0x0, 0xfffffffd, 0x6, 0x1fe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x1, 0x0, 0x20, 0x12504, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x4, 0x0, 0xfffe, 0x0, 0xffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002"], 0x0, 0x3a, 0x0, 0x1}, 0x28) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000070040000900000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="040000000000000005009c5600000000000000000f000000000000009d6d9e9552b212d47f40f0f81425a6074d308695dd3ca63dbe39bc2449d8"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNSETQUEUE(r6, 0x400454d9, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000040), 0x4) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x21, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 41.736032028s ago: executing program 3 (id=13741): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) 41.596920122s ago: executing program 2 (id=13742): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfe80, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 41.536808382s ago: executing program 0 (id=13743): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000540)=r1, 0x4) 41.363347341s ago: executing program 3 (id=13744): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)=')[@{+\x00') ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x52d35ce30131f272}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038000a001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x0, 0xb, 0x3, 0x8, 0xc, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0xb6, &(0x7f0000000300)=""/182, 0x41000, 0x9, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x9, 0x9, 0x80000000}, 0x10, 0xceeb, r6, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000580)=r7) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.271827216s ago: executing program 0 (id=13745): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5d, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800400001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), 0x42) openat$cgroup(0xffffffffffffffff, &(0x7f0000001c00)='syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000001d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x3, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x5e}, @struct={0x6, 0x6, 0x0, 0x4, 0x0, 0x8000, [{0x8, 0x0, 0x1}, {0xc, 0x2, 0xbec6}, {0x2, 0x1, 0x5}, {0x3, 0x2, 0x9}, {0x5, 0x3, 0x80}, {0x2, 0x0, 0x2}]}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @type_tag={0xffff0001, 0x0, 0x0, 0x12, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x4b, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000001e00)=""/130, 0xa7, 0x82, 0x0, 0x8000, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x5}, 0x8) getpid() 40.980801855s ago: executing program 2 (id=13746): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 40.695977032s ago: executing program 2 (id=13747): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000480)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x10}], 0x1}, 0x4044055) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000000000000000020eb5bd58b9f8c350000000000"], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40086602, &(0x7f0000000180)=0x20) recvmsg$unix(r4, 0x0, 0x81) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x21, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0x6, 0xb, 0x10, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x91, 0x42, &(0x7f0000000380)=""/66, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x10, 0x800, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) sendmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r4, &(0x7f0000000600)="3460d27074156361c0ad3ac4d1692ea25cc4dae0dbb810a4096858edbd6c073998d6671a88324d7e8966322f7559d8c6dee2e780a9471e4b93ddfde5d8727d789752c5a54043d6bb25549f3d8513eac847e71539f4e3283aa03b48c6ef37e2f46ff7cc00974b63e80b449681fe9bfe68439e1d1742d564f8bc4d0ff1f344524e2f88a8d8c45f1035421e35c42e4bbecc327609d4ee3363155f23f6dc32c4499f6cbe9f8918bbef9595fa", &(0x7f00000006c0)=""/243, 0x4}, 0x20) 37.158930493s ago: executing program 0 (id=13748): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x459f, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87c"], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 3) 37.05589429s ago: executing program 1 (id=13749): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)=""/20, 0x4f}, {&(0x7f0000001f00)=""/4100, 0xa83}, {&(0x7f0000000bc0)=""/209, 0xa5}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000340)=""/108, 0x9a}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f00000001c0)=""/154, 0xaa}, {&(0x7f0000001c40)=""/219, 0xdb}, {&(0x7f0000000700)=""/171}, {&(0x7f0000000800)=""/206}, {&(0x7f0000000280)=""/124}], 0x8}, 0x102) 36.87883104s ago: executing program 0 (id=13750): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Z', 0x1}], 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="cf657f59d0153de418f30cf714e2ceadc387b872242ba51feb145a51be9b8ca92c001df078cf38246aced4a6b01dab", 0x2f}, {&(0x7f0000000080)="c5547ba5759f1ed04de32d4412f60d4d924c198b1342260f25ee73a58de9ac54fa09ffc775107e22437184f8f106ab959af809c1589b34e0d13ed0181dde60cdbc98b2b479a736e4f28db213c06fa0f47f9f4d5e2c62259375f253be573360e7c9a96e6ba28401822cd2be799ae1b49085857c6480daad7f24f431caa284ad907beed57ae6e593a89ed2e4ed9453b26241c50bf2093e729a8db03db7eca3ae8912b417200b2b98465ceacc8cd92a71404302a33095a6842e6b7ce83d454f9084a2c33787d266f90eab4dbc446612ccfd", 0xd0}, {&(0x7f0000000180)="404be664a0ad989a6c9cb5903725acc85d1157cbb824", 0x16}, {&(0x7f0000000240)="225f1b96dd3d326b0e919f29068595f776eeb0fdf2867811f371d33614e06f93f61061817a6311924e3fbd1f92b889a984f2f0dae56e732bea6b159a524ed766c5b72b86966d91d64d93d5abddbfd535239781541f86e2cd56828b44c4b6844600fe20187a764f0e8194444aa08ba4637d9b5199e6557b30dc41bb52cd615bc9352182fb3898f846f34ff94a35e7ca9e40e638ecf600fcd29b4ce50b9643b0aec16716cf72227e2e98c6ae9c2381e36d3f6e59b72ade3df82b9fcc306e1ae9bc51ebaf8c8c4a599696443990", 0xcc}, {&(0x7f0000000340)}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x20008880) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891a, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) 36.315730794s ago: executing program 2 (id=13751): perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x7, 0xfb, 0x7, 0xca, 0x0, 0x9, 0x10, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000240), 0xf}, 0x0, 0xfff, 0x8000000, 0x8, 0xffffffffffffffd2, 0x7, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000003000000090000000000000202000000000000000000000200000000090000000000000a01000000090000000000001102000000ffffffff000000000000000300000000020000000400000001000000002000"], &(0x7f00000000c0)=""/29, 0x67, 0x1d, 0x1, 0x1}, 0x28) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x10000000001, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8000, 0xa6d}, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf942071763", 0x5a}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000040), 0x4) recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@ax25={{0x3, @default}, [@rose, @rose, @remote, @remote, @remote, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000001780)=[{0x0}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000013c0)=""/244, 0xf4}, {0x0}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/214, 0xd6}, {0x0}], 0x8, &(0x7f0000001800)=""/148, 0x94}, 0x2) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x1000, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="e7c80000000000000000000000000000000000008f6967c862bf99880afae09044ce37de0feac7e1d39b77762f9fa5b012dbf9d9ec453a60fde9e29558b37a7cf158872c851733de50cb6e479f82fa2c09a7ca09b0e0e30afc5645040340127a6a02dbf4000a061ecf2963722caee3224c05b530ffa5dce91e0ac8c487fdd9dd79c94c8b138887c81fdf2b988bc5bd75df7897c7b955fd3fd79eff517b3adf5acce998", @ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="02000000040000000400"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, r0, 0x8, &(0x7f0000000000)={0x10000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10, 0xffffffffffffffff}, 0x94) 33.093094744s ago: executing program 3 (id=13752): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) 32.192709004s ago: executing program 1 (id=13753): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000540)=r1, 0x4) 19.443957937s ago: executing program 32 (id=13750): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f000000"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Z', 0x1}], 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="cf657f59d0153de418f30cf714e2ceadc387b872242ba51feb145a51be9b8ca92c001df078cf38246aced4a6b01dab", 0x2f}, {&(0x7f0000000080)="c5547ba5759f1ed04de32d4412f60d4d924c198b1342260f25ee73a58de9ac54fa09ffc775107e22437184f8f106ab959af809c1589b34e0d13ed0181dde60cdbc98b2b479a736e4f28db213c06fa0f47f9f4d5e2c62259375f253be573360e7c9a96e6ba28401822cd2be799ae1b49085857c6480daad7f24f431caa284ad907beed57ae6e593a89ed2e4ed9453b26241c50bf2093e729a8db03db7eca3ae8912b417200b2b98465ceacc8cd92a71404302a33095a6842e6b7ce83d454f9084a2c33787d266f90eab4dbc446612ccfd", 0xd0}, {&(0x7f0000000180)="404be664a0ad989a6c9cb5903725acc85d1157cbb824", 0x16}, {&(0x7f0000000240)="225f1b96dd3d326b0e919f29068595f776eeb0fdf2867811f371d33614e06f93f61061817a6311924e3fbd1f92b889a984f2f0dae56e732bea6b159a524ed766c5b72b86966d91d64d93d5abddbfd535239781541f86e2cd56828b44c4b6844600fe20187a764f0e8194444aa08ba4637d9b5199e6557b30dc41bb52cd615bc9352182fb3898f846f34ff94a35e7ca9e40e638ecf600fcd29b4ce50b9643b0aec16716cf72227e2e98c6ae9c2381e36d3f6e59b72ade3df82b9fcc306e1ae9bc51ebaf8c8c4a599696443990", 0xcc}, {&(0x7f0000000340)}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x20008880) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891a, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) 15.796970847s ago: executing program 33 (id=13751): perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x7, 0xfb, 0x7, 0xca, 0x0, 0x9, 0x10, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000240), 0xf}, 0x0, 0xfff, 0x8000000, 0x8, 0xffffffffffffffd2, 0x7, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000003000000090000000000000202000000000000000000000200000000090000000000000a01000000090000000000001102000000ffffffff000000000000000300000000020000000400000001000000002000"], &(0x7f00000000c0)=""/29, 0x67, 0x1d, 0x1, 0x1}, 0x28) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x105181, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x10000000001, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8000, 0xa6d}, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf942071763", 0x5a}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000040), 0x4) recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@ax25={{0x3, @default}, [@rose, @rose, @remote, @remote, @remote, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000001780)=[{0x0}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000013c0)=""/244, 0xf4}, {0x0}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/214, 0xd6}, {0x0}], 0x8, &(0x7f0000001800)=""/148, 0x94}, 0x2) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x1000, 0x8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0x1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r8, @ANYBLOB="e7c80000000000000000000000000000000000008f6967c862bf99880afae09044ce37de0feac7e1d39b77762f9fa5b012dbf9d9ec453a60fde9e29558b37a7cf158872c851733de50cb6e479f82fa2c09a7ca09b0e0e30afc5645040340127a6a02dbf4000a061ecf2963722caee3224c05b530ffa5dce91e0ac8c487fdd9dd79c94c8b138887c81fdf2b988bc5bd75df7897c7b955fd3fd79eff517b3adf5acce998", @ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="02000000040000000400"/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, r0, 0x8, &(0x7f0000000000)={0x10000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10, 0xffffffffffffffff}, 0x94) 13.032604539s ago: executing program 3 (id=13756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000008000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000740)="00800000000000000045a9000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x16, 0xe90, 0x0, 0xd52, 0x46040, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x50}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x40880) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000040)='](-\x00') 0s ago: executing program 34 (id=13753): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000540)=r1, 0x4) kernel console output (not intermixed with test programs): 2736.013025][T13728] [ 2736.016200][T13728] dump_stack_lvl+0x18c/0x250 [ 2736.020916][T13728] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2736.027291][T13728] ? show_regs_print_info+0x20/0x20 [ 2736.032764][T13728] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2736.040164][T13728] ? dump_stack+0x9/0x20 [ 2736.044767][T13728] warn_alloc+0x246/0x340 [ 2736.049674][T13728] ? __get_vm_area_node+0x125/0x370 [ 2736.056329][T13728] ? zone_watermark_ok_safe+0x230/0x230 [ 2736.062223][T13728] ? rcu_is_watching+0x15/0xb0 [ 2736.068357][T13728] ? __get_vm_area_node+0x356/0x370 [ 2736.075555][T13728] __vmalloc_node_range+0x393/0x1330 [ 2736.080966][T13728] ? netlink_insert+0x109f/0x13a0 [ 2736.086648][T13728] ? netlink_data_ready+0x10/0x10 [ 2736.093551][T13728] ? free_vm_area+0x50/0x50 [ 2736.099012][T13728] ? netlink_sendmsg+0x602/0xbf0 [ 2736.105159][T13728] vmalloc+0x79/0x90 [ 2736.109204][T13728] ? netlink_sendmsg+0x602/0xbf0 [ 2736.114786][T13728] netlink_sendmsg+0x602/0xbf0 [ 2736.119943][T13728] ? netlink_getsockopt+0x590/0x590 [ 2736.125364][T13728] ? aa_sock_msg_perm+0x94/0x150 [ 2736.130455][T13728] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2736.135948][T13728] ? security_socket_sendmsg+0x80/0xa0 [ 2736.141532][T13728] ? netlink_getsockopt+0x590/0x590 [ 2736.146881][T13728] ____sys_sendmsg+0x5ba/0x960 [ 2736.151782][T13728] ? __asan_memset+0x22/0x40 [ 2736.156707][T13728] ? __sys_sendmsg_sock+0x30/0x30 [ 2736.161937][T13728] ? __import_iovec+0x5f2/0x850 [ 2736.166945][T13728] ? import_iovec+0x73/0xa0 [ 2736.171488][T13728] ___sys_sendmsg+0x2a6/0x360 [ 2736.176823][T13728] ? __sys_sendmsg+0x2a0/0x2a0 [ 2736.182435][T13728] ? __lock_acquire+0x7d40/0x7d40 [ 2736.189011][T13728] __se_sys_sendmsg+0x1c2/0x2b0 [ 2736.194874][T13728] ? __x64_sys_sendmsg+0x80/0x80 [ 2736.200689][T13728] ? lockdep_hardirqs_on+0x98/0x150 [ 2736.206653][T13728] do_syscall_64+0x55/0xa0 [ 2736.211455][T13728] ? clear_bhb_loop+0x40/0x90 [ 2736.216568][T13728] ? clear_bhb_loop+0x40/0x90 [ 2736.221422][T13728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2736.227386][T13728] RIP: 0033:0x7f4b6059c819 [ 2736.231961][T13728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2736.241102][T13712] netlink: 'syz.2.12768': attribute type 1 has an invalid length. [ 2736.252484][T13728] RSP: 002b:00007f4b614b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2736.252520][T13728] RAX: ffffffffffffffda RBX: 00007f4b60815fa0 RCX: 00007f4b6059c819 [ 2736.252535][T13728] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2736.252548][T13728] RBP: 00007f4b614b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2736.252559][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2736.252571][T13728] R13: 00007f4b60816038 R14: 00007f4b60815fa0 R15: 00007ffe44bf7108 [ 2736.252625][T13728] [ 2736.310166][T13728] Mem-Info: [ 2736.332357][T13728] active_anon:7541 inactive_anon:0 isolated_anon:0 [ 2736.332357][T13728] active_file:21365 inactive_file:40963 isolated_file:0 [ 2736.332357][T13728] unevictable:768 dirty:212 writeback:0 [ 2736.332357][T13728] slab_reclaimable:10899 slab_unreclaimable:95503 [ 2736.332357][T13728] mapped:25319 shmem:1361 pagetables:541 [ 2736.332357][T13728] sec_pagetables:0 bounce:0 [ 2736.332357][T13728] kernel_misc_reclaimable:0 [ 2736.332357][T13728] free:1338925 free_pcp:2593 free_cma:0 [ 2736.340388][T13712] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.12768'. [ 2736.405998][T13728] Node 0 active_anon:30164kB inactive_anon:0kB active_file:85460kB inactive_file:163648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104576kB dirty:848kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10148kB pagetables:2164kB sec_pagetables:0kB all_unreclaimable? no [ 2736.415858][T13722] netlink: 'syz.2.12768': attribute type 4 has an invalid length. [ 2736.475873][T13728] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2736.522938][T13728] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2736.536387][T13722] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12768'. [ 2736.587149][T13728] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2736.597228][T13728] Node 0 DMA32 free:1426060kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:30172kB inactive_anon:0kB active_file:85460kB inactive_file:162824kB unevictable:1536kB writepending:936kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:10408kB local_pcp:7832kB free_cma:0kB [ 2736.682047][T13728] lowmem_reserve[]: 0 0 0 0 0 [ 2736.687105][T13728] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2736.739588][T13728] lowmem_reserve[]: 0 0 0 0 0 [ 2736.748984][T13728] Node 1 Normal free:3913768kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2736.780912][T13728] lowmem_reserve[]: 0 0 0 0 0 [ 2736.786012][T13728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2736.800321][T13728] Node 0 DMA32: 2645*4kB (UM) 2675*8kB (UME) 2652*16kB (UME) 927*32kB (UME) 632*64kB (UME) 200*128kB (UME) 147*256kB (UME) 66*512kB (UME) 29*1024kB (UM) 14*2048kB (UM) 275*4096kB (UM) = 1426316kB [ 2736.824868][T13728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2736.853510][T13728] Node 1 Normal: 208*4kB (UME) 57*8kB (UME) 40*16kB (UME) 217*32kB (UME) 86*64kB (UE) 34*128kB (UME) 11*256kB (UE) 6*512kB (UME) 0*1024kB 3*2048kB (UE) 948*4096kB (M) = 3913768kB [ 2736.874950][T13728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2736.885094][T13728] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2736.895204][T13728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2736.907438][T13728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2736.918146][T13728] 63689 total pagecache pages [ 2736.956911][T13728] 0 pages in swap cache [ 2736.964202][T13728] Free swap = 124996kB [ 2736.971450][T13728] Total swap = 124996kB [ 2736.979555][T13728] 2097051 pages RAM [ 2736.984734][T13728] 0 pages HighMem/MovableOnly [ 2736.989634][T13728] 416927 pages reserved [ 2736.994568][T13728] 0 pages cma reserved [ 2737.088982][T13744] FAULT_INJECTION: forcing a failure. [ 2737.088982][T13744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2737.120895][T13744] CPU: 1 PID: 13744 Comm: syz.0.12778 Not tainted syzkaller #0 [ 2737.128590][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2737.139032][T13744] Call Trace: [ 2737.142353][T13744] [ 2737.145332][T13744] dump_stack_lvl+0x18c/0x250 [ 2737.150085][T13744] ? show_regs_print_info+0x20/0x20 [ 2737.155542][T13744] ? load_image+0x420/0x420 [ 2737.160206][T13744] ? __might_fault+0xaa/0x120 [ 2737.165032][T13744] ? __lock_acquire+0x7d40/0x7d40 [ 2737.170138][T13744] should_fail_ex+0x39d/0x4d0 [ 2737.174940][T13744] _copy_from_iter+0x1d9/0x12e0 [ 2737.179861][T13744] ? slab_post_alloc_hook+0x8a/0x4b0 [ 2737.185762][T13744] ? __virt_addr_valid+0x18c/0x540 [ 2737.190948][T13744] ? __lock_acquire+0x7d40/0x7d40 [ 2737.196327][T13744] ? rcu_is_watching+0x15/0xb0 [ 2737.201653][T13744] ? copyout_mc+0x70/0x70 [ 2737.206084][T13744] ? __virt_addr_valid+0x18c/0x540 [ 2737.211385][T13744] ? __virt_addr_valid+0x18c/0x540 [ 2737.216760][T13744] ? __virt_addr_valid+0x469/0x540 [ 2737.222101][T13744] ? __check_object_size+0x506/0xa20 [ 2737.227697][T13744] netlink_sendmsg+0x76b/0xbf0 [ 2737.232681][T13744] ? perf_trace_lock+0x304/0x3b0 [ 2737.237854][T13744] ? netlink_getsockopt+0x590/0x590 [ 2737.243383][T13744] ? aa_sock_msg_perm+0x94/0x150 [ 2737.248470][T13744] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2737.253800][T13744] ? security_socket_sendmsg+0x80/0xa0 [ 2737.259303][T13744] ? netlink_getsockopt+0x590/0x590 [ 2737.264645][T13744] ____sys_sendmsg+0x5ba/0x960 [ 2737.269549][T13744] ? __asan_memset+0x22/0x40 [ 2737.274186][T13744] ? __sys_sendmsg_sock+0x30/0x30 [ 2737.279345][T13744] ? __import_iovec+0x5f2/0x850 [ 2737.284860][T13744] ? import_iovec+0x73/0xa0 [ 2737.289422][T13744] ___sys_sendmsg+0x2a6/0x360 [ 2737.294159][T13744] ? __sys_sendmsg+0x2a0/0x2a0 [ 2737.299412][T13744] ? __lock_acquire+0x7d40/0x7d40 [ 2737.304799][T13744] __se_sys_sendmsg+0x1c2/0x2b0 [ 2737.309702][T13744] ? __x64_sys_sendmsg+0x80/0x80 [ 2737.314705][T13744] ? lockdep_hardirqs_on+0x98/0x150 [ 2737.320043][T13744] do_syscall_64+0x55/0xa0 [ 2737.324755][T13744] ? clear_bhb_loop+0x40/0x90 [ 2737.329683][T13744] ? clear_bhb_loop+0x40/0x90 [ 2737.335729][T13744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2737.342896][T13744] RIP: 0033:0x7f4b6059c819 [ 2737.347886][T13744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2737.368221][T13744] RSP: 002b:00007f4b614b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2737.377379][T13744] RAX: ffffffffffffffda RBX: 00007f4b60815fa0 RCX: 00007f4b6059c819 [ 2737.385555][T13744] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003 [ 2737.394338][T13744] RBP: 00007f4b614b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2737.402691][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2737.411364][T13744] R13: 00007f4b60816038 R14: 00007f4b60815fa0 R15: 00007ffe44bf7108 [ 2737.419537][T13744] [ 2737.427786][T13746] netlink: 'syz.3.12779': attribute type 29 has an invalid length. [ 2737.436265][T13746] netlink: 'syz.3.12779': attribute type 29 has an invalid length. [ 2737.450147][T13749] netlink: 'syz.3.12779': attribute type 29 has an invalid length. [ 2738.027433][T13776] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12791'. [ 2738.065374][T13776] net_ratelimit: 15 callbacks suppressed [ 2738.065411][T13776] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 2738.634043][T13792] syzkaller0: entered promiscuous mode [ 2738.714075][T13792] syzkaller0: entered allmulticast mode [ 2750.597236][T13828] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2750.603428][T13828] dvmrp1: linktype set to 804 [ 2750.610103][T13829] dvmrp1: tun_chr_ioctl cmd 35108 [ 2751.032376][T13847] netlink: 196 bytes leftover after parsing attributes in process `syz.2.12808'. [ 2751.175410][T13853] sock: sock_set_timeout: `syz.2.12808' (pid 13853) tries to set negative timeout [ 2753.986306][T13861] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.12812'. [ 2754.011175][T13861] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.12812'. [ 2754.035615][T13861] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.12812'. [ 2754.049929][T13861] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.12812'. [ 2754.288696][T13871] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12815'. [ 2754.377165][T13865] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12815'. [ 2754.857201][T13881] netlink: 'syz.1.12821': attribute type 1 has an invalid length. [ 2754.882000][T13881] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.12821'. [ 2755.007591][T13881] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.12821'. [ 2755.082869][T13881] netlink: 'syz.1.12821': attribute type 1 has an invalid length. [ 2755.297162][T13897] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.12825'. [ 2755.349810][T13899] FAULT_INJECTION: forcing a failure. [ 2755.349810][T13899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2755.395463][T13899] CPU: 1 PID: 13899 Comm: syz.1.12826 Not tainted syzkaller #0 [ 2755.403176][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2755.413358][T13899] Call Trace: [ 2755.417108][T13899] [ 2755.420341][T13899] dump_stack_lvl+0x18c/0x250 [ 2755.425162][T13899] ? show_regs_print_info+0x20/0x20 [ 2755.430582][T13899] ? load_image+0x420/0x420 [ 2755.435129][T13899] ? __might_fault+0xaa/0x120 [ 2755.440199][T13899] ? __lock_acquire+0x7d40/0x7d40 [ 2755.445357][T13899] should_fail_ex+0x39d/0x4d0 [ 2755.451933][T13899] _copy_from_user+0x2f/0xe0 [ 2755.456748][T13899] __sys_bpf+0x23e/0x890 [ 2755.461042][T13899] ? bpf_link_show_fdinfo+0x390/0x390 [ 2755.466587][T13899] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2755.473059][T13899] __x64_sys_bpf+0x7c/0x90 [ 2755.478736][T13899] do_syscall_64+0x55/0xa0 [ 2755.483484][T13899] ? clear_bhb_loop+0x40/0x90 [ 2755.489341][T13899] ? clear_bhb_loop+0x40/0x90 [ 2755.494327][T13899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2755.500354][T13899] RIP: 0033:0x7f961c19c819 [ 2755.504897][T13899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2755.525062][T13899] RSP: 002b:00007f961cf73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2755.533691][T13899] RAX: ffffffffffffffda RBX: 00007f961c415fa0 RCX: 00007f961c19c819 [ 2755.541778][T13899] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 2755.549784][T13899] RBP: 00007f961cf73090 R08: 0000000000000000 R09: 0000000000000000 [ 2755.557880][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2755.565890][T13899] R13: 00007f961c416038 R14: 00007f961c415fa0 R15: 00007ffdc9d2b9d8 [ 2755.573921][T13899] [ 2755.690548][T13903] netlink: 'syz.0.12833': attribute type 7 has an invalid length. [ 2756.107501][T13894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2756.353607][T13907] netlink: 'syz.1.12829': attribute type 10 has an invalid length. [ 2756.428153][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.451564][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.462291][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.483536][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.510864][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.536172][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.548056][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.560769][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.574337][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2756.586557][T13913] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2757.010809][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 2758.355725][T13944] netlink: 'syz.2.12840': attribute type 7 has an invalid length. [ 2758.865371][T13938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2759.525098][T13946] __nla_validate_parse: 3 callbacks suppressed [ 2759.525122][T13946] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.12841'. [ 2759.571092][T13946] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.12841'. [ 2759.593424][T13953] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.12841'. [ 2759.635925][T13946] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.12841'. [ 2759.747788][T13959] netlink: 'syz.3.12850': attribute type 10 has an invalid length. [ 2759.819510][T13959] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2759.862857][T13959] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2759.892562][T13959] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2759.945012][T13959] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2760.131429][T13959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.170514][T13959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.180449][T13959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.207742][T13959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2760.239594][T13959] team0: Port device geneve1 added [ 2760.439685][T13968] netlink: 'syz.2.12847': attribute type 21 has an invalid length. [ 2761.135292][T13982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12854'. [ 2761.180721][T13984] netlink: 'syz.2.12852': attribute type 7 has an invalid length. [ 2761.535546][T13991] netlink: 'syz.3.12856': attribute type 3 has an invalid length. [ 2761.550211][T13991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12856'. [ 2761.887266][T13977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2762.136435][T14005] netlink: 'syz.3.12862': attribute type 9 has an invalid length. [ 2762.155826][T14005] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.12862'. [ 2762.461321][T14015] netlink: 'syz.1.12866': attribute type 10 has an invalid length. [ 2762.469574][T14015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12866'. [ 2762.518197][T14015] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 2762.553988][T14015] net_ratelimit: 29572 callbacks suppressed [ 2762.554008][T14015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2762.588155][T14020] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.12869'. [ 2762.608608][T14020] netlink: 'syz.0.12869': attribute type 2 has an invalid length. [ 2762.741841][T14020] pim6reg1: entered promiscuous mode [ 2762.747978][T14020] pim6reg1: entered allmulticast mode [ 2763.453706][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12869'. [ 2763.475772][T14024] bridge_slave_0: entered allmulticast mode [ 2763.495486][T14031] netlink: 'syz.1.12870': attribute type 7 has an invalid length. [ 2763.682757][T14028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2764.595010][T14038] delete_channel: no stack [ 2765.206985][T14072] netlink: 'syz.0.12884': attribute type 7 has an invalid length. [ 2765.232763][T14074] netlink: 'syz.2.12883': attribute type 3 has an invalid length. [ 2765.267398][T14074] netlink: 'syz.2.12883': attribute type 16 has an invalid length. [ 2765.318865][T14074] __nla_validate_parse: 4 callbacks suppressed [ 2765.318889][T14074] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12883'. [ 2765.949383][T14068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2766.013692][T14082] netlink: 'syz.3.12889': attribute type 10 has an invalid length. [ 2766.023757][T14082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12889'. [ 2766.049830][T14082] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.12889'. [ 2766.094177][T14082] netlink: set zone limit has 8 unknown bytes [ 2766.125741][T14087] delete_channel: no stack [ 2766.141658][T14087] delete_channel: no stack [ 2766.313102][T14091] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12893'. [ 2766.468610][T14097] netlink: 'syz.0.12893': attribute type 10 has an invalid length. [ 2766.505650][T14097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12893'. [ 2766.757736][T14103] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.12896'. [ 2766.770198][T14103] netlink: zone id is out of range [ 2766.817512][T14103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12896'. [ 2766.828057][T14103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12896'. [ 2766.851138][T14103] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12896'. [ 2767.058151][T14111] netlink: 'syz.1.12899': attribute type 7 has an invalid length. [ 2767.556767][T14116] macsec0: entered promiscuous mode [ 2767.578615][T14116] macsec0: entered allmulticast mode [ 2767.594918][T14116] veth1_macvtap: entered allmulticast mode [ 2767.802528][T14106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2768.235786][T14131] netlink: 'syz.1.12908': attribute type 29 has an invalid length. [ 2768.251101][T14131] netlink: 'syz.1.12908': attribute type 29 has an invalid length. [ 2768.316403][T14134] netlink: 'syz.2.12910': attribute type 3 has an invalid length. [ 2768.329372][T14135] netlink: 'syz.1.12908': attribute type 29 has an invalid length. [ 2768.338820][T14135] netlink: 'syz.1.12908': attribute type 29 has an invalid length. [ 2768.348297][T14131] netlink: 'syz.1.12908': attribute type 29 has an invalid length. [ 2768.348311][T14134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12910'. [ 2768.387598][T14135] netlink: 'syz.1.12908': attribute type 29 has an invalid length. [ 2768.533262][T14147] tc_dump_action: action bad kind [ 2768.639326][ T9809] tipc: Subscription rejected, illegal request [ 2768.736320][T14150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2770.075816][T14198] hsr_slave_1 (unregistering): left promiscuous mode [ 2770.501444][T14212] __nla_validate_parse: 9 callbacks suppressed [ 2770.501463][T14212] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12940'. [ 2770.532320][T14212] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 2771.084424][T14225] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12945'. [ 2771.529140][T14238] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.12950'. [ 2771.550799][T14238] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.12950'. [ 2771.561849][T14238] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12950'. [ 2771.575492][T14238] tc_dump_action: action bad kind [ 2772.037502][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12955'. [ 2772.457419][T14265] FAULT_INJECTION: forcing a failure. [ 2772.457419][T14265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2772.522113][T14267] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.12962'. [ 2772.542293][T14265] CPU: 0 PID: 14265 Comm: syz.0.12960 Not tainted syzkaller #0 [ 2772.544071][T14267] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.12962'. [ 2772.550241][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2772.550260][T14265] Call Trace: [ 2772.550269][T14265] [ 2772.550277][T14265] dump_stack_lvl+0x18c/0x250 [ 2772.550311][T14265] ? show_regs_print_info+0x20/0x20 [ 2772.550335][T14265] ? load_image+0x420/0x420 [ 2772.569963][T14267] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12962'. [ 2772.570048][T14267] tc_dump_action: action bad kind [ 2772.606242][T14265] ? __lock_acquire+0x7d40/0x7d40 [ 2772.611279][T14265] should_fail_ex+0x39d/0x4d0 [ 2772.616197][T14265] _copy_from_user+0x2f/0xe0 [ 2772.620849][T14265] __copy_msghdr+0x3bb/0x580 [ 2772.625623][T14265] ___sys_sendmsg+0x214/0x360 [ 2772.630306][T14265] ? get_pid_task+0x20/0x1e0 [ 2772.634987][T14265] ? __sys_sendmsg+0x2a0/0x2a0 [ 2772.639762][T14265] ? __lock_acquire+0x7d40/0x7d40 [ 2772.644814][T14265] __se_sys_sendmsg+0x1c2/0x2b0 [ 2772.649766][T14265] ? __x64_sys_sendmsg+0x80/0x80 [ 2772.654819][T14265] ? lockdep_hardirqs_on+0x98/0x150 [ 2772.660367][T14265] do_syscall_64+0x55/0xa0 [ 2772.664871][T14265] ? clear_bhb_loop+0x40/0x90 [ 2772.669544][T14265] ? clear_bhb_loop+0x40/0x90 [ 2772.674314][T14265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2772.680305][T14265] RIP: 0033:0x7f4b6059c819 [ 2772.684821][T14265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2772.705772][T14265] RSP: 002b:00007f4b614b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2772.714296][T14265] RAX: ffffffffffffffda RBX: 00007f4b60815fa0 RCX: 00007f4b6059c819 [ 2772.722455][T14265] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2772.730552][T14265] RBP: 00007f4b614b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2772.738619][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2772.746676][T14265] R13: 00007f4b60816038 R14: 00007f4b60815fa0 R15: 00007ffe44bf7108 [ 2772.754745][T14265] [ 2773.204900][T14277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2773.365836][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12968'. [ 2775.335877][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.354920][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2777.176685][T14313] validate_nla: 4 callbacks suppressed [ 2777.176707][T14313] netlink: 'syz.1.12978': attribute type 1 has an invalid length. [ 2777.192188][T14320] netlink: 'syz.1.12978': attribute type 39 has an invalid length. [ 2777.323390][T14327] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 2778.367693][T14367] netlink: 'syz.0.12995': attribute type 7 has an invalid length. [ 2778.866118][T14371] IPv6: pim6reg1: Disabled Multicast RS [ 2779.124618][T14361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2779.600107][T14388] FAULT_INJECTION: forcing a failure. [ 2779.600107][T14388] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.640777][T14388] CPU: 1 PID: 14388 Comm: syz.0.13003 Not tainted syzkaller #0 [ 2779.648384][T14388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2779.658572][T14388] Call Trace: [ 2779.662141][T14388] [ 2779.665195][T14388] dump_stack_lvl+0x18c/0x250 [ 2779.669915][T14388] ? show_regs_print_info+0x20/0x20 [ 2779.675182][T14388] ? load_image+0x420/0x420 [ 2779.679779][T14388] ? __might_sleep+0xe0/0xe0 [ 2779.684513][T14388] ? __lock_acquire+0x7d40/0x7d40 [ 2779.689559][T14388] should_fail_ex+0x39d/0x4d0 [ 2779.694432][T14388] should_failslab+0x9/0x20 [ 2779.698942][T14388] slab_pre_alloc_hook+0x59/0x310 [ 2779.704245][T14388] ? kernfs_fop_write_iter+0x159/0x520 [ 2779.709897][T14388] ? kernfs_fop_write_iter+0x159/0x520 [ 2779.716882][T14388] __kmem_cache_alloc_node+0x53/0x250 [ 2779.722276][T14388] ? kernfs_fop_write_iter+0x159/0x520 [ 2779.727829][T14388] __kmalloc+0xa4/0x230 [ 2779.731992][T14388] kernfs_fop_write_iter+0x159/0x520 [ 2779.737421][T14388] vfs_write+0x46c/0x990 [ 2779.741826][T14388] ? file_end_write+0x250/0x250 [ 2779.746847][T14388] ? __fget_files+0x43d/0x4b0 [ 2779.751566][T14388] ? __fdget_pos+0x2a3/0x330 [ 2779.756443][T14388] ? ksys_write+0x75/0x260 [ 2779.760962][T14388] ksys_write+0x150/0x260 [ 2779.765305][T14388] ? __ia32_sys_read+0x90/0x90 [ 2779.770162][T14388] ? lockdep_hardirqs_on+0x98/0x150 [ 2779.775377][T14388] do_syscall_64+0x55/0xa0 [ 2779.779896][T14388] ? clear_bhb_loop+0x40/0x90 [ 2779.784822][T14388] ? clear_bhb_loop+0x40/0x90 [ 2779.791034][T14388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2779.796968][T14388] RIP: 0033:0x7f4b6059c819 [ 2779.801693][T14388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2779.822546][T14388] RSP: 002b:00007f4b614b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2779.831326][T14388] RAX: ffffffffffffffda RBX: 00007f4b60815fa0 RCX: 00007f4b6059c819 [ 2779.840572][T14388] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 000000000000000c [ 2779.848947][T14388] RBP: 00007f4b614b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2779.857362][T14388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2779.865914][T14388] R13: 00007f4b60816038 R14: 00007f4b60815fa0 R15: 00007ffe44bf7108 [ 2779.874741][T14388] [ 2780.565459][T14412] netlink: 'syz.3.13011': attribute type 7 has an invalid length. [ 2780.866702][T14414] netlink: 'syz.1.13013': attribute type 3 has an invalid length. [ 2780.877229][T14414] netlink: 'syz.1.13013': attribute type 1 has an invalid length. [ 2780.885697][T14414] __nla_validate_parse: 1 callbacks suppressed [ 2780.885713][T14414] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.13013'. [ 2781.116826][T14416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2781.294185][T14408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2782.056842][T14450] netlink: 'syz.2.13027': attribute type 7 has an invalid length. [ 2782.828069][T14448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2783.413417][T14478] FAULT_INJECTION: forcing a failure. [ 2783.413417][T14478] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.434451][T14478] CPU: 0 PID: 14478 Comm: syz.1.13040 Not tainted syzkaller #0 [ 2783.443643][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2783.455239][T14478] Call Trace: [ 2783.458741][T14478] [ 2783.462594][T14478] dump_stack_lvl+0x18c/0x250 [ 2783.469269][T14478] ? show_regs_print_info+0x20/0x20 [ 2783.474691][T14478] ? load_image+0x420/0x420 [ 2783.479270][T14478] ? __might_sleep+0xe0/0xe0 [ 2783.485916][T14478] ? __lock_acquire+0x7d40/0x7d40 [ 2783.492057][T14478] should_fail_ex+0x39d/0x4d0 [ 2783.497063][T14478] should_failslab+0x9/0x20 [ 2783.501883][T14478] slab_pre_alloc_hook+0x59/0x310 [ 2783.507077][T14478] kmem_cache_alloc_node+0x60/0x320 [ 2783.512604][T14478] ? __alloc_skb+0x103/0x2c0 [ 2783.517366][T14478] __alloc_skb+0x103/0x2c0 [ 2783.521911][T14478] rtmsg_ifa+0xf9/0x1f0 [ 2783.526218][T14478] __inet_del_ifa+0x865/0x1020 [ 2783.531386][T14478] devinet_ioctl+0xb40/0x1c40 [ 2783.536270][T14478] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 2783.542420][T14478] ? _copy_from_user+0xa5/0xe0 [ 2783.547479][T14478] ? get_user_ifreq+0x12b/0x180 [ 2783.552665][T14478] inet_ioctl+0x42b/0x560 [ 2783.557035][T14478] ? tomoyo_path_number_perm+0x217/0x620 [ 2783.563270][T14478] ? inet_shutdown+0x370/0x370 [ 2783.568216][T14478] ? slab_free_freelist_hook+0x130/0x1a0 [ 2783.574067][T14478] ? tomoyo_path_number_perm+0x500/0x620 [ 2783.579796][T14478] ? __kmem_cache_free+0xba/0x1e0 [ 2783.585061][T14478] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2783.590793][T14478] sock_do_ioctl+0xfc/0x310 [ 2783.595499][T14478] ? sock_show_fdinfo+0xb0/0xb0 [ 2783.600463][T14478] sock_ioctl+0x5ba/0x7e0 [ 2783.605207][T14478] ? sock_poll+0x3e0/0x3e0 [ 2783.609759][T14478] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2783.614903][T14478] ? security_file_ioctl+0x80/0xa0 [ 2783.620131][T14478] ? sock_poll+0x3e0/0x3e0 [ 2783.624658][T14478] __se_sys_ioctl+0xfd/0x170 [ 2783.629293][T14478] do_syscall_64+0x55/0xa0 [ 2783.633799][T14478] ? clear_bhb_loop+0x40/0x90 [ 2783.638481][T14478] ? clear_bhb_loop+0x40/0x90 [ 2783.643186][T14478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2783.649272][T14478] RIP: 0033:0x7f961c19c819 [ 2783.653879][T14478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2783.675045][T14478] RSP: 002b:00007f961cf73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2783.684010][T14478] RAX: ffffffffffffffda RBX: 00007f961c415fa0 RCX: 00007f961c19c819 [ 2783.692292][T14478] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 000000000000000f [ 2783.700824][T14478] RBP: 00007f961cf73090 R08: 0000000000000000 R09: 0000000000000000 [ 2783.708900][T14478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2783.717751][T14478] R13: 00007f961c416038 R14: 00007f961c415fa0 R15: 00007ffdc9d2b9d8 [ 2783.726150][T14478] [ 2783.883440][T14491] netlink: 'syz.3.13042': attribute type 7 has an invalid length. [ 2783.895241][T14488] netlink: 'syz.1.13043': attribute type 29 has an invalid length. [ 2784.628762][T14485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2785.077230][T14511] IPv6: pim6reg1: Disabled Multicast RS [ 2785.605069][T14537] netlink: 'syz.1.13058': attribute type 21 has an invalid length. [ 2785.615467][T14537] netlink: 156 bytes leftover after parsing attributes in process `syz.1.13058'. [ 2785.907461][T14547] netlink: 'syz.2.13060': attribute type 7 has an invalid length. [ 2786.641631][T14541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2786.834866][T14566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2786.853088][T14566] netlink: 'syz.2.13070': attribute type 10 has an invalid length. [ 2787.363751][T14588] netlink: 'syz.0.13078': attribute type 7 has an invalid length. [ 2787.521883][T14591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13079'. [ 2787.559225][T14591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13079'. [ 2787.579293][T14590] netlink: 'syz.1.13079': attribute type 10 has an invalid length. [ 2787.871696][T14595] FAULT_INJECTION: forcing a failure. [ 2787.871696][T14595] name failslab, interval 1, probability 0, space 0, times 0 [ 2787.887038][T14595] CPU: 1 PID: 14595 Comm: syz.1.13081 Not tainted syzkaller #0 [ 2787.894841][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2787.905495][T14595] Call Trace: [ 2787.908832][T14595] [ 2787.911827][T14595] dump_stack_lvl+0x18c/0x250 [ 2787.916625][T14595] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2787.923255][T14595] ? show_regs_print_info+0x20/0x20 [ 2787.928734][T14595] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2787.935713][T14595] should_fail_ex+0x39d/0x4d0 [ 2787.942241][T14595] should_failslab+0x9/0x20 [ 2787.947094][T14595] slab_pre_alloc_hook+0x59/0x310 [ 2787.952182][T14595] ? trace_call_bpf+0x5e9/0x6c0 [ 2787.957367][T14595] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2787.963713][T14595] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2787.969769][T14595] __kmem_cache_alloc_node+0x53/0x250 [ 2787.975510][T14595] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2787.981379][T14595] __kmalloc+0xa4/0x230 [ 2787.985807][T14595] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2787.991881][T14595] tomoyo_path_number_perm+0x248/0x620 [ 2787.997657][T14595] ? tomoyo_path_number_perm+0x217/0x620 [ 2788.003436][T14595] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2788.009046][T14595] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2788.015067][T14595] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2788.021373][T14595] ? lockdep_hardirqs_on+0x98/0x150 [ 2788.026776][T14595] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2788.033241][T14595] security_file_ioctl+0x70/0xa0 [ 2788.038540][T14595] __se_sys_ioctl+0x48/0x170 [ 2788.043445][T14595] do_syscall_64+0x55/0xa0 [ 2788.048404][T14595] ? clear_bhb_loop+0x40/0x90 [ 2788.053296][T14595] ? clear_bhb_loop+0x40/0x90 [ 2788.058598][T14595] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2788.064820][T14595] RIP: 0033:0x7f961c19c819 [ 2788.069829][T14595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2788.090571][T14595] RSP: 002b:00007f961cf73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2788.099515][T14595] RAX: ffffffffffffffda RBX: 00007f961c415fa0 RCX: 00007f961c19c819 [ 2788.109034][T14595] RDX: 0000200000000380 RSI: 000000004008240b RDI: 0000000000000003 [ 2788.118140][T14595] RBP: 00007f961cf73090 R08: 0000000000000000 R09: 0000000000000000 [ 2788.126577][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2788.135403][T14595] R13: 00007f961c416038 R14: 00007f961c415fa0 R15: 00007ffdc9d2b9d8 [ 2788.145018][T14595] [ 2788.149282][T14585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2788.182951][T14595] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2788.411314][T14604] netlink: 'syz.3.13083': attribute type 64 has an invalid length. [ 2788.605814][T14613] netlink: 'syz.1.13085': attribute type 29 has an invalid length. [ 2788.647373][T14613] netlink: 'syz.1.13085': attribute type 29 has an invalid length. [ 2788.669289][T14608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13085'. [ 2789.761445][T14642] validate_nla: 1 callbacks suppressed [ 2789.761471][T14642] netlink: 'syz.0.13092': attribute type 7 has an invalid length. [ 2790.494945][T14638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2790.516206][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13098'. [ 2790.768040][T14666] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.13101'. [ 2791.235676][T14676] FAULT_INJECTION: forcing a failure. [ 2791.235676][T14676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2791.270791][T14676] CPU: 0 PID: 14676 Comm: syz.0.13106 Not tainted syzkaller #0 [ 2791.278661][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2791.289024][T14676] Call Trace: [ 2791.292343][T14676] [ 2791.295607][T14676] dump_stack_lvl+0x18c/0x250 [ 2791.300368][T14676] ? show_regs_print_info+0x20/0x20 [ 2791.305713][T14676] ? load_image+0x420/0x420 [ 2791.310370][T14676] ? __might_fault+0xaa/0x120 [ 2791.315103][T14676] ? __lock_acquire+0x7d40/0x7d40 [ 2791.320281][T14676] should_fail_ex+0x39d/0x4d0 [ 2791.325057][T14676] _copy_from_user+0x2f/0xe0 [ 2791.329705][T14676] ___sys_sendmsg+0x1c7/0x360 [ 2791.334527][T14676] ? __sys_sendmsg+0x2a0/0x2a0 [ 2791.339587][T14676] ? __lock_acquire+0x7d40/0x7d40 [ 2791.344701][T14676] __se_sys_sendmsg+0x1c2/0x2b0 [ 2791.349772][T14676] ? __x64_sys_sendmsg+0x80/0x80 [ 2791.354803][T14676] ? lockdep_hardirqs_on+0x98/0x150 [ 2791.360084][T14676] do_syscall_64+0x55/0xa0 [ 2791.364582][T14676] ? clear_bhb_loop+0x40/0x90 [ 2791.369306][T14676] ? clear_bhb_loop+0x40/0x90 [ 2791.374134][T14676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2791.380516][T14676] RIP: 0033:0x7f4b6059c819 [ 2791.384997][T14676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2791.404996][T14676] RSP: 002b:00007f4b614b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2791.413821][T14676] RAX: ffffffffffffffda RBX: 00007f4b60815fa0 RCX: 00007f4b6059c819 [ 2791.422358][T14676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2791.430733][T14676] RBP: 00007f4b614b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2791.438844][T14676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.447237][T14676] R13: 00007f4b60816038 R14: 00007f4b60815fa0 R15: 00007ffe44bf7108 [ 2791.455704][T14676] [ 2792.298511][T14689] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.13111'. [ 2794.895442][T14743] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13139'. [ 2795.095699][T14746] syzkaller0: create flow: hash 3218559425 index 1 [ 2795.126419][T14743] syzkaller0: entered promiscuous mode [ 2795.138044][T14743] syzkaller0: entered allmulticast mode [ 2795.149848][ T3198] syzkaller0: tun_net_xmit 48 [ 2795.286356][T14742] syzkaller0: delete flow: hash 3218559425 index 1 [ 2798.377436][T14752] netlink: 'syz.3.13135': attribute type 15 has an invalid length. [ 2799.019650][T14783] FAULT_INJECTION: forcing a failure. [ 2799.019650][T14783] name failslab, interval 1, probability 0, space 0, times 0 [ 2799.041090][T14783] CPU: 1 PID: 14783 Comm: syz.0.13147 Not tainted syzkaller #0 [ 2799.049052][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2799.059561][T14783] Call Trace: [ 2799.063060][T14783] [ 2799.066117][T14783] dump_stack_lvl+0x18c/0x250 [ 2799.071022][T14783] ? sctp_sendmsg+0x1575/0x28c0 [ 2799.076045][T14783] ? ___sys_sendmsg+0x2a6/0x360 [ 2799.081098][T14783] ? show_regs_print_info+0x20/0x20 [ 2799.086408][T14783] ? load_image+0x420/0x420 [ 2799.091343][T14783] should_fail_ex+0x39d/0x4d0 [ 2799.096059][T14783] should_failslab+0x9/0x20 [ 2799.100912][T14783] slab_pre_alloc_hook+0x59/0x310 [ 2799.105995][T14783] ? sctp_add_bind_addr+0x8c/0x360 [ 2799.111194][T14783] __kmem_cache_alloc_node+0x53/0x250 [ 2799.116566][T14783] ? sctp_add_bind_addr+0x8c/0x360 [ 2799.121692][T14783] kmalloc_trace+0x2a/0xe0 [ 2799.126121][T14783] sctp_add_bind_addr+0x8c/0x360 [ 2799.131163][T14783] sctp_copy_local_addr_list+0x315/0x4f0 [ 2799.137021][T14783] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 2799.142814][T14783] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 2799.149002][T14783] ? sctp_v6_is_any+0x64/0x70 [ 2799.153795][T14783] ? sctp_copy_one_addr+0x8c/0x350 [ 2799.158938][T14783] sctp_bind_addr_copy+0xb3/0x3c0 [ 2799.163977][T14783] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2799.170593][T14783] sctp_connect_new_asoc+0x2f9/0x6a0 [ 2799.175970][T14783] ? __sctp_connect+0xd80/0xd80 [ 2799.181081][T14783] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2799.186625][T14783] ? security_sctp_bind_connect+0x89/0xb0 [ 2799.192431][T14783] sctp_sendmsg+0x1575/0x28c0 [ 2799.197133][T14783] ? sctp_getsockopt+0xb60/0xb60 [ 2799.202445][T14783] ? aa_sk_perm+0x83c/0x970 [ 2799.207073][T14783] ? aa_af_perm+0x330/0x330 [ 2799.211664][T14783] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2799.218082][T14783] ? sock_rps_record_flow+0x19/0x3f0 [ 2799.223636][T14783] ? inet_sendmsg+0xe9/0x2f0 [ 2799.228315][T14783] ? inet_send_prepare+0x260/0x260 [ 2799.233557][T14783] ____sys_sendmsg+0x5ba/0x960 [ 2799.238497][T14783] ? __lock_acquire+0x7d40/0x7d40 [ 2799.243533][T14783] ? __sys_sendmsg_sock+0x30/0x30 [ 2799.248668][T14783] ? __import_iovec+0x5f2/0x850 [ 2799.254388][T14783] ? import_iovec+0x73/0xa0 [ 2799.258988][T14783] ___sys_sendmsg+0x2a6/0x360 [ 2799.263952][T14783] ? __sys_sendmsg+0x2a0/0x2a0 [ 2799.268863][T14783] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2799.275202][T14783] __se_sys_sendmsg+0x1c2/0x2b0 [ 2799.280165][T14783] ? __x64_sys_sendmsg+0x80/0x80 [ 2799.285113][T14783] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2799.291272][T14783] do_syscall_64+0x55/0xa0 [ 2799.295683][T14783] ? clear_bhb_loop+0x40/0x90 [ 2799.300445][T14783] ? clear_bhb_loop+0x40/0x90 [ 2799.305127][T14783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2799.311022][T14783] RIP: 0033:0x7f4b6059c819 [ 2799.315433][T14783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2799.335596][T14783] RSP: 002b:00007f4b614b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2799.344948][T14783] RAX: ffffffffffffffda RBX: 00007f4b60815fa0 RCX: 00007f4b6059c819 [ 2799.353274][T14783] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000008 [ 2799.361598][T14783] RBP: 00007f4b614b8090 R08: 0000000000000000 R09: 0000000000000000 [ 2799.369750][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2799.377914][T14783] R13: 00007f4b60816038 R14: 00007f4b60815fa0 R15: 00007ffe44bf7108 [ 2799.386091][T14783] [ 2799.630191][T14792] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13151'. [ 2799.847050][T14799] syzkaller0: create flow: hash 3218559425 index 1 [ 2799.946691][T14792] syzkaller0: entered promiscuous mode [ 2799.968606][T14792] syzkaller0: entered allmulticast mode [ 2799.980203][ T3189] syzkaller0: tun_net_xmit 48 [ 2800.248259][T14791] syzkaller0: delete flow: hash 3218559425 index 1 [ 2800.294180][T14813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13157'. [ 2800.857471][T14829] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13157'. [ 2803.996642][T14813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13157'. [ 2806.116005][T14885] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13183'. [ 2806.134762][T14885] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2806.256558][T14899] netlink: 'syz.2.13188': attribute type 11 has an invalid length. [ 2807.264366][T14929] netlink: 'syz.3.13200': attribute type 1 has an invalid length. [ 2807.402364][T14934] netlink: 'syz.3.13201': attribute type 11 has an invalid length. [ 2807.406341][T14936] netlink: 'syz.0.13202': attribute type 3 has an invalid length. [ 2807.427090][T14936] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.13202'. [ 2807.911540][T14947] netlink: 'syz.3.13205': attribute type 17 has an invalid length. [ 2807.935533][T14947] netlink: 'syz.3.13205': attribute type 16 has an invalid length. [ 2807.960793][T14947] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13205'. [ 2807.995701][T14944] netlink: 'syz.0.13203': attribute type 10 has an invalid length. [ 2808.010347][T14944] syz_tun: left allmulticast mode [ 2808.021743][T14944] syz_tun: left promiscuous mode [ 2808.029583][T14944] GPL: port 1(syz_tun) entered disabled state [ 2808.068193][T14944] team0: Device syz_tun is up. Set it down before adding it as a team port [ 2808.260003][T14964] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.13209'. [ 2808.277527][T14964] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.13209'. [ 2808.298291][T14964] tipc: Started in network mode [ 2808.341223][T14964] tipc: Node identity b, cluster identity 73 [ 2808.374849][T14964] tipc: Node number set to 11 [ 2809.229167][T14977] netlink: 'syz.1.13212': attribute type 6 has an invalid length. [ 2809.748066][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2809.760372][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2809.770553][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2809.798987][T14983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2809.808045][T14983] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2809.817204][T14983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2810.255558][T14995] netlink: 'syz.1.13214': attribute type 11 has an invalid length. [ 2810.678925][T14981] chnl_net:caif_netlink_parms(): no params data found [ 2810.994347][T14981] bridge0: port 1(bridge_slave_0) entered blocking state [ 2811.026714][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 2811.049237][T14981] bridge_slave_0: entered allmulticast mode [ 2811.070921][T14981] bridge_slave_0: entered promiscuous mode [ 2811.180989][T14981] bridge0: port 2(bridge_slave_1) entered blocking state [ 2811.188319][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 2811.226982][T14981] bridge_slave_1: entered allmulticast mode [ 2811.253392][T14981] bridge_slave_1: entered promiscuous mode [ 2811.326663][T14981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2811.376860][T14981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2811.455238][T14981] team0: Port device team_slave_0 added [ 2811.497556][T14981] team0: Port device team_slave_1 added [ 2811.604137][ T3198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.669889][T14981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2811.691719][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2811.738460][T14981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2811.795026][ T3198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2811.832350][T14981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2811.839679][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2811.870488][T14981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2811.900928][ T1853] Bluetooth: hci4: command tx timeout [ 2811.924797][T15024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2811.932695][T15024] IPv6: NLM_F_CREATE should be set when creating new route [ 2811.941695][T15024] IPv6: NLM_F_CREATE should be set when creating new route [ 2811.950498][T15024] IPv6: NLM_F_CREATE should be set when creating new route [ 2812.198945][ T3198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2812.220182][T15032] netlink: 'syz.2.13227': attribute type 11 has an invalid length. [ 2812.273828][T14981] hsr_slave_0: entered promiscuous mode [ 2812.291787][T14981] hsr_slave_1: entered promiscuous mode [ 2812.303465][T14981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2812.324703][T14981] Cannot create hsr debugfs directory [ 2812.416715][ T3198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.999908][ T1853] Bluetooth: hci4: command tx timeout [ 2814.689212][T15097] netlink: 'syz.2.13239': attribute type 11 has an invalid length. [ 2815.118102][T14981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2815.148960][T14981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2815.292277][T14981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2815.452355][T14981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2816.061086][ T1853] Bluetooth: hci4: command tx timeout [ 2816.079831][T15123] netlink: 'syz.1.13242': attribute type 10 has an invalid length. [ 2816.268198][T15123] team0: Port device syz_tun added [ 2816.550838][T15141] netlink: 'syz.3.13245': attribute type 10 has an invalid length. [ 2816.560118][T15141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13245'. [ 2816.580442][T15141] caif0: entered promiscuous mode [ 2816.588237][T15141] caif0: entered allmulticast mode [ 2816.601737][T15141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2816.679105][ T3198] hsr_slave_0: left promiscuous mode [ 2816.699434][ T3198] hsr_slave_1: left promiscuous mode [ 2816.728189][ T3198] veth1_macvtap: left allmulticast mode [ 2816.740831][ T3198] veth1_macvtap: left promiscuous mode [ 2816.752442][ T3198] veth0_macvtap: left promiscuous mode [ 2816.764871][ T3198] veth1_vlan: left promiscuous mode [ 2816.775674][ T3198] veth0_vlan: left promiscuous mode [ 2817.922705][ T3198] team0 (unregistering): Port device team_slave_1 removed [ 2817.977899][ T3198] team0 (unregistering): Port device C removed [ 2818.035382][ T3198] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2818.095886][ T3198] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2818.130939][ T1853] Bluetooth: hci4: command tx timeout [ 2818.445020][ T3198] .` (unregistering): Released all slaves [ 2818.589719][T15155] syzkaller0: entered promiscuous mode [ 2818.595826][T15155] syzkaller0: entered allmulticast mode [ 2821.794201][T14981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2821.858477][T14981] 8021q: adding VLAN 0 to HW filter on device team0 [ 2821.897752][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 2821.904970][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2821.934324][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 2821.941708][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2822.352703][T15188] netlink: 'syz.2.13254': attribute type 10 has an invalid length. [ 2822.365922][T15188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13254'. [ 2822.387990][T15188] ipvlan1: entered promiscuous mode [ 2822.402505][T15188] ipvlan1: entered allmulticast mode [ 2822.411259][T15188] veth0_vlan: entered allmulticast mode [ 2822.420213][T15188] bridge0: port 4(ipvlan1) entered blocking state [ 2822.443767][T15188] bridge0: port 4(ipvlan1) entered disabled state [ 2822.456568][T15188] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2822.547216][T14981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2822.662481][T15195] FAULT_INJECTION: forcing a failure. [ 2822.662481][T15195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2822.721889][T15195] CPU: 1 PID: 15195 Comm: syz.2.13255 Not tainted syzkaller #0 [ 2822.729779][T15195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2822.741775][T15195] Call Trace: [ 2822.745095][T15195] [ 2822.748605][T15195] dump_stack_lvl+0x18c/0x250 [ 2822.753935][T15195] ? show_regs_print_info+0x20/0x20 [ 2822.759364][T15195] ? load_image+0x420/0x420 [ 2822.763911][T15195] ? __might_fault+0xaa/0x120 [ 2822.768618][T15195] ? __lock_acquire+0x7d40/0x7d40 [ 2822.773689][T15195] should_fail_ex+0x39d/0x4d0 [ 2822.778425][T15195] _copy_from_user+0x2f/0xe0 [ 2822.783237][T15195] __tun_chr_ioctl+0x1031/0x2000 [ 2822.788297][T15195] ? tun_flow_create+0x310/0x310 [ 2822.793502][T15195] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2822.798616][T15195] ? security_file_ioctl+0x80/0xa0 [ 2822.803760][T15195] ? tun_chr_poll+0x630/0x630 [ 2822.808478][T15195] __se_sys_ioctl+0xfd/0x170 [ 2822.814005][T15195] do_syscall_64+0x55/0xa0 [ 2822.818887][T15195] ? clear_bhb_loop+0x40/0x90 [ 2822.823854][T15195] ? clear_bhb_loop+0x40/0x90 [ 2822.829146][T15195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2822.836280][T15195] RIP: 0033:0x7f7fcbb9c819 [ 2822.841225][T15195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2822.865811][T15195] RSP: 002b:00007f7fcc9ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2822.875123][T15195] RAX: ffffffffffffffda RBX: 00007f7fcbe15fa0 RCX: 00007f7fcbb9c819 [ 2822.884615][T15195] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000003 [ 2822.893664][T15195] RBP: 00007f7fcc9ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2822.901782][T15195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2822.909777][T15195] R13: 00007f7fcbe16038 R14: 00007f7fcbe15fa0 R15: 00007ffdb86ca1e8 [ 2822.917852][T15195] [ 2823.057716][T14981] veth0_vlan: entered promiscuous mode [ 2823.116436][T14981] veth1_vlan: entered promiscuous mode [ 2823.224364][T14981] veth0_macvtap: entered promiscuous mode [ 2823.259951][T14981] veth1_macvtap: entered promiscuous mode [ 2823.378296][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.465695][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.521606][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.555302][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.591265][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2823.630743][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2823.662687][T14981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2824.856093][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2824.895708][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2824.922076][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2824.950383][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2824.971179][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2824.998997][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2825.044061][T14981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2825.085101][T15222] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13259'. [ 2825.226090][T14981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.249960][T14981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.271726][T14981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.282270][T14981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2825.558745][ T9809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2825.588535][ T9809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2825.650663][ T3189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2825.670730][ T3189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2826.012392][T15268] netlink: 'syz.2.13262': attribute type 10 has an invalid length. [ 2826.020418][T15268] team0: Device syz_tun is up. Set it down before adding it as a team port [ 2826.537717][T15281] netlink: 'syz.3.13267': attribute type 9 has an invalid length. [ 2826.546006][T15281] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13267'. [ 2826.907374][T15286] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13270'. [ 2827.566502][T15306] netlink: 149424 bytes leftover after parsing attributes in process `syz.3.13279'. [ 2827.580163][T15306] openvswitch: netlink: Message has 60427 unknown bytes. [ 2828.250413][T15323] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13285'. [ 2828.568520][T15308] netlink: 'syz.2.13278': attribute type 10 has an invalid length. [ 2828.595042][T15308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13278'. [ 2828.656693][T15308] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 2828.672677][T15308] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2828.742780][T15308] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 2828.751992][T15328] netlink: 'syz.0.13287': attribute type 11 has an invalid length. [ 2829.352580][T15353] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13297'. [ 2829.627472][T15355] netlink: 'syz.2.13298': attribute type 9 has an invalid length. [ 2829.642574][T15355] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.13298'. [ 2829.811711][T15360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13300'. [ 2829.831180][T15360] team0: entered promiscuous mode [ 2829.836519][T15360] team_slave_0: entered promiscuous mode [ 2829.851975][T15360] team_slave_1: entered promiscuous mode [ 2829.870775][T15360] syz_tun: entered promiscuous mode [ 2829.878834][T15360] geneve1: entered promiscuous mode [ 2829.900055][T15360] team0: entered allmulticast mode [ 2829.917642][T15360] team_slave_0: entered allmulticast mode [ 2829.927809][T15360] team_slave_1: entered allmulticast mode [ 2829.948145][T15360] syz_tun: entered allmulticast mode [ 2829.967234][T15360] geneve1: entered allmulticast mode [ 2830.366325][T15357] netlink: 'syz.1.13299': attribute type 10 has an invalid length. [ 2830.396866][T15357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13299'. [ 2830.420739][T15373] netlink: 'syz.0.13304': attribute type 4 has an invalid length. [ 2830.838895][T15389] netlink: 'syz.0.13311': attribute type 9 has an invalid length. [ 2830.861015][T15389] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.13311'. [ 2831.046183][T15387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2831.152131][T15399] netlink: 'syz.3.13315': attribute type 11 has an invalid length. [ 2831.403084][T15402] netlink: 'syz.2.13316': attribute type 11 has an invalid length. [ 2832.177845][T15420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13320'. [ 2832.559837][T15427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2832.838056][T15444] FAULT_INJECTION: forcing a failure. [ 2832.838056][T15444] name failslab, interval 1, probability 0, space 0, times 0 [ 2832.894978][T15444] CPU: 0 PID: 15444 Comm: syz.3.13332 Not tainted syzkaller #0 [ 2832.903053][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2832.913207][T15444] Call Trace: [ 2832.916517][T15444] [ 2832.919472][T15444] dump_stack_lvl+0x18c/0x250 [ 2832.924282][T15444] ? show_regs_print_info+0x20/0x20 [ 2832.929610][T15444] ? load_image+0x420/0x420 [ 2832.934175][T15444] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2832.940348][T15444] ? __asan_memset+0x22/0x40 [ 2832.946973][T15444] should_fail_ex+0x39d/0x4d0 [ 2832.951951][T15444] should_failslab+0x9/0x20 [ 2832.956754][T15444] slab_pre_alloc_hook+0x59/0x310 [ 2832.962266][T15444] ? __debug_object_init+0xec/0x450 [ 2832.967526][T15444] kmem_cache_alloc+0x5a/0x2d0 [ 2832.972312][T15444] ? slab_build_skb+0x2b/0x3f0 [ 2832.977195][T15444] slab_build_skb+0x2b/0x3f0 [ 2832.981829][T15444] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 2832.987215][T15444] ? __fget_files+0x28/0x4b0 [ 2832.991805][T15444] ? __fget_files+0x28/0x4b0 [ 2832.996543][T15444] ? __fget_files+0x43d/0x4b0 [ 2833.001414][T15444] ? cpu_online+0x60/0x60 [ 2833.005748][T15444] bpf_prog_test_run+0x321/0x390 [ 2833.010695][T15444] __sys_bpf+0x49d/0x890 [ 2833.014950][T15444] ? bpf_link_show_fdinfo+0x390/0x390 [ 2833.020332][T15444] ? lock_chain_count+0x20/0x20 [ 2833.025273][T15444] __x64_sys_bpf+0x7c/0x90 [ 2833.029851][T15444] do_syscall_64+0x55/0xa0 [ 2833.034361][T15444] ? clear_bhb_loop+0x40/0x90 [ 2833.039041][T15444] ? clear_bhb_loop+0x40/0x90 [ 2833.043803][T15444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2833.050068][T15444] RIP: 0033:0x7f089379c819 [ 2833.054500][T15444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2833.078113][T15444] RSP: 002b:00007f0894672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2833.086820][T15444] RAX: ffffffffffffffda RBX: 00007f0893a15fa0 RCX: 00007f089379c819 [ 2833.097319][T15444] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 2833.111661][T15444] RBP: 00007f0894672090 R08: 0000000000000000 R09: 0000000000000000 [ 2833.124153][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2833.135214][T15444] R13: 00007f0893a16038 R14: 00007f0893a15fa0 R15: 00007ffd7a7765f8 [ 2833.144234][T15444] [ 2833.662812][T15473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2833.682532][T15475] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13342'. [ 2833.867768][T15484] FAULT_INJECTION: forcing a failure. [ 2833.867768][T15484] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.890501][T15484] CPU: 1 PID: 15484 Comm: syz.1.13346 Not tainted syzkaller #0 [ 2833.899121][T15484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2833.909742][T15484] Call Trace: [ 2833.913209][T15484] [ 2833.916286][T15484] dump_stack_lvl+0x18c/0x250 [ 2833.922613][T15484] ? show_regs_print_info+0x20/0x20 [ 2833.928415][T15484] ? load_image+0x420/0x420 [ 2833.933015][T15484] ? __might_sleep+0xe0/0xe0 [ 2833.938039][T15484] ? __lock_acquire+0x7d40/0x7d40 [ 2833.943543][T15484] should_fail_ex+0x39d/0x4d0 [ 2833.948637][T15484] should_failslab+0x9/0x20 [ 2833.953600][T15484] slab_pre_alloc_hook+0x59/0x310 [ 2833.959437][T15484] ? rtnl_newlink+0x10d/0x20a0 [ 2833.965395][T15484] __kmem_cache_alloc_node+0x53/0x250 [ 2833.971003][T15484] ? rtnl_newlink+0x10d/0x20a0 [ 2833.975821][T15484] kmalloc_trace+0x2a/0xe0 [ 2833.980371][T15484] ? rtnl_setlink+0x4e0/0x4e0 [ 2833.985882][T15484] rtnl_newlink+0x10d/0x20a0 [ 2833.990851][T15484] ? __mutex_trylock_common+0x159/0x260 [ 2833.997059][T15484] ? rtnl_setlink+0x4e0/0x4e0 [ 2834.001786][T15484] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2834.008029][T15484] ? rcu_is_watching+0x15/0xb0 [ 2834.012959][T15484] ? trace_contention_end+0x39/0xe0 [ 2834.018945][T15484] ? __mutex_lock+0x315/0xcc0 [ 2834.023850][T15484] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 2834.029216][T15484] ? mutex_lock_nested+0x20/0x20 [ 2834.034335][T15484] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 2834.039692][T15484] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 2834.045406][T15484] ? rtnl_setlink+0x4e0/0x4e0 [ 2834.050235][T15484] rtnetlink_rcv_msg+0x869/0xfa0 [ 2834.055633][T15484] ? rtnetlink_bind+0x80/0x80 [ 2834.060811][T15484] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2834.066780][T15484] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2834.072967][T15484] ? __dev_queue_xmit+0x265/0x3660 [ 2834.078498][T15484] ? __dev_queue_xmit+0x265/0x3660 [ 2834.085066][T15484] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2834.091616][T15484] ? perf_trace_lock+0x304/0x3b0 [ 2834.096851][T15484] netlink_rcv_skb+0x241/0x4d0 [ 2834.102176][T15484] ? rtnetlink_bind+0x80/0x80 [ 2834.107567][T15484] ? netlink_ack+0x1180/0x1180 [ 2834.112622][T15484] ? __lock_acquire+0x7d40/0x7d40 [ 2834.119598][T15484] ? netlink_deliver_tap+0x2e/0x1b0 [ 2834.125506][T15484] netlink_unicast+0x751/0x8d0 [ 2834.131328][T15484] netlink_sendmsg+0x8d0/0xbf0 [ 2834.137913][T15484] ? perf_trace_lock+0x304/0x3b0 [ 2834.143343][T15484] ? netlink_getsockopt+0x590/0x590 [ 2834.148744][T15484] ? aa_sock_msg_perm+0x94/0x150 [ 2834.153947][T15484] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2834.159291][T15484] ? security_socket_sendmsg+0x80/0xa0 [ 2834.164978][T15484] ? netlink_getsockopt+0x590/0x590 [ 2834.170490][T15484] ____sys_sendmsg+0x5ba/0x960 [ 2834.175333][T15484] ? __asan_memset+0x22/0x40 [ 2834.180269][T15484] ? __sys_sendmsg_sock+0x30/0x30 [ 2834.185447][T15484] ? __import_iovec+0x5f2/0x850 [ 2834.190453][T15484] ? import_iovec+0x73/0xa0 [ 2834.195100][T15484] ___sys_sendmsg+0x2a6/0x360 [ 2834.199936][T15484] ? __sys_sendmsg+0x2a0/0x2a0 [ 2834.204808][T15484] ? __lock_acquire+0x7d40/0x7d40 [ 2834.209939][T15484] __se_sys_sendmsg+0x1c2/0x2b0 [ 2834.215189][T15484] ? __x64_sys_sendmsg+0x80/0x80 [ 2834.220846][T15484] ? lockdep_hardirqs_on+0x98/0x150 [ 2834.226536][T15484] do_syscall_64+0x55/0xa0 [ 2834.231208][T15484] ? clear_bhb_loop+0x40/0x90 [ 2834.236134][T15484] ? clear_bhb_loop+0x40/0x90 [ 2834.241235][T15484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2834.247374][T15484] RIP: 0033:0x7f961c19c819 [ 2834.251939][T15484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2834.273242][T15484] RSP: 002b:00007f961cf73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2834.282297][T15484] RAX: ffffffffffffffda RBX: 00007f961c415fa0 RCX: 00007f961c19c819 [ 2834.290860][T15484] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000007 [ 2834.299702][T15484] RBP: 00007f961cf73090 R08: 0000000000000000 R09: 0000000000000000 [ 2834.308316][T15484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2834.317005][T15484] R13: 00007f961c416038 R14: 00007f961c415fa0 R15: 00007ffdc9d2b9d8 [ 2834.326029][T15484] [ 2834.503926][T15491] netlink: 'syz.0.13347': attribute type 4 has an invalid length. [ 2834.514833][T15491] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13347'. [ 2834.608384][T15491] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2834.919427][T15501] netlink: 'syz.0.13352': attribute type 4 has an invalid length. [ 2834.930267][T15501] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13352'. [ 2834.942217][T15501] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2835.135492][T15508] netlink: 'syz.3.13355': attribute type 11 has an invalid length. [ 2835.819972][T15511] netlink: 'syz.0.13356': attribute type 10 has an invalid length. [ 2835.841347][T15511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13356'. [ 2835.906698][T15511] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 2835.915995][T15511] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2835.946749][T15511] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 2836.137809][T15526] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13362'. [ 2836.314456][T15535] netlink: 'syz.3.13365': attribute type 11 has an invalid length. [ 2836.509273][T15546] netlink: 'syz.3.13369': attribute type 11 has an invalid length. [ 2836.525625][T15542] IPv6: NLM_F_CREATE should be specified when creating new route [ 2836.801334][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.811060][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.956387][T15560] netlink: 'syz.3.13372': attribute type 10 has an invalid length. [ 2836.965310][T15560] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13372'. [ 2836.977254][T15560] batadv_slave_1: entered promiscuous mode [ 2836.984171][T15560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2836.992822][T15560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2837.076955][T15563] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13373'. [ 2837.095980][T15563] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13373'. [ 2837.115376][T15563] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13373'. [ 2837.134295][T15563] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.13373'. [ 2837.448077][T15570] netlink: 'syz.0.13375': attribute type 10 has an invalid length. [ 2837.477569][T15574] FAULT_INJECTION: forcing a failure. [ 2837.477569][T15574] name failslab, interval 1, probability 0, space 0, times 0 [ 2837.487040][T15573] netlink: 'syz.2.13377': attribute type 11 has an invalid length. [ 2837.560781][T15574] CPU: 0 PID: 15574 Comm: syz.3.13378 Not tainted syzkaller #0 [ 2837.569969][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2837.580515][T15574] Call Trace: [ 2837.584129][T15574] [ 2837.587184][T15574] dump_stack_lvl+0x18c/0x250 [ 2837.592181][T15574] ? show_regs_print_info+0x20/0x20 [ 2837.598100][T15574] ? load_image+0x420/0x420 [ 2837.603951][T15574] ? __might_sleep+0xe0/0xe0 [ 2837.609570][T15574] ? __lock_acquire+0x7d40/0x7d40 [ 2837.615544][T15574] should_fail_ex+0x39d/0x4d0 [ 2837.621116][T15574] should_failslab+0x9/0x20 [ 2837.627335][T15574] slab_pre_alloc_hook+0x59/0x310 [ 2837.633725][T15574] ? tomoyo_encode+0x28b/0x540 [ 2837.640026][T15574] ? tomoyo_encode+0x28b/0x540 [ 2837.645919][T15574] __kmem_cache_alloc_node+0x53/0x250 [ 2837.653193][T15574] ? tomoyo_encode+0x28b/0x540 [ 2837.659981][T15574] __kmalloc+0xa4/0x230 [ 2837.665113][T15574] tomoyo_encode+0x28b/0x540 [ 2837.670284][T15574] tomoyo_realpath_from_path+0x592/0x5d0 [ 2837.676310][T15574] tomoyo_path_number_perm+0x248/0x620 [ 2837.682083][T15574] ? tomoyo_path_number_perm+0x217/0x620 [ 2837.688794][T15574] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2837.695825][T15574] ? ksys_write+0x1c4/0x260 [ 2837.701963][T15574] ? __fget_files+0x28/0x4b0 [ 2837.708137][T15574] ? __fget_files+0x28/0x4b0 [ 2837.714336][T15574] security_file_ioctl+0x70/0xa0 [ 2837.721012][T15574] __se_sys_ioctl+0x48/0x170 [ 2837.726408][T15574] do_syscall_64+0x55/0xa0 [ 2837.731884][T15574] ? clear_bhb_loop+0x40/0x90 [ 2837.737462][T15574] ? clear_bhb_loop+0x40/0x90 [ 2837.743689][T15574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2837.750378][T15574] RIP: 0033:0x7f089379c819 [ 2837.756148][T15574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2837.778940][T15574] RSP: 002b:00007f0894672028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2837.788871][T15574] RAX: ffffffffffffffda RBX: 00007f0893a15fa0 RCX: 00007f089379c819 [ 2837.798001][T15574] RDX: 0000200000000300 RSI: 0000000040082404 RDI: 0000000000000006 [ 2837.807777][T15574] RBP: 00007f0894672090 R08: 0000000000000000 R09: 0000000000000000 [ 2837.819313][T15574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2837.830011][T15574] R13: 00007f0893a16038 R14: 00007f0893a15fa0 R15: 00007ffd7a7765f8 [ 2837.840241][T15574] [ 2837.882867][T15574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2838.462616][T15605] netlink: 'syz.3.13389': attribute type 11 has an invalid length. [ 2839.217552][T15635] __nla_validate_parse: 2 callbacks suppressed [ 2839.217572][T15635] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.13400'. [ 2839.333930][T15641] FAULT_INJECTION: forcing a failure. [ 2839.333930][T15641] name failslab, interval 1, probability 0, space 0, times 0 [ 2839.341505][T15630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13398'. [ 2839.349218][T15641] CPU: 0 PID: 15641 Comm: syz.3.13403 Not tainted syzkaller #0 [ 2839.364142][T15641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2839.374338][T15641] Call Trace: [ 2839.377738][T15641] [ 2839.380791][T15641] dump_stack_lvl+0x18c/0x250 [ 2839.386935][T15641] ? show_regs_print_info+0x20/0x20 [ 2839.392276][T15641] ? load_image+0x420/0x420 [ 2839.396829][T15641] ? __lock_acquire+0x7d40/0x7d40 [ 2839.401899][T15641] should_fail_ex+0x39d/0x4d0 [ 2839.406790][T15641] should_failslab+0x9/0x20 [ 2839.411516][T15641] slab_pre_alloc_hook+0x59/0x310 [ 2839.416929][T15641] ? ip6_setup_cork+0x1d6/0xfe0 [ 2839.421813][T15641] __kmem_cache_alloc_node+0x53/0x250 [ 2839.427315][T15641] ? ip6_setup_cork+0x1d6/0xfe0 [ 2839.432200][T15641] kmalloc_trace+0x2a/0xe0 [ 2839.436854][T15641] ip6_setup_cork+0x1d6/0xfe0 [ 2839.441945][T15641] ip6_append_data+0x220/0x350 [ 2839.447275][T15641] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 2839.452656][T15641] udpv6_sendmsg+0xbe4/0x2390 [ 2839.457779][T15641] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 2839.462918][T15641] ? udp_v6_early_demux+0xf80/0xf80 [ 2839.468408][T15641] ? lock_chain_count+0x20/0x20 [ 2839.473300][T15641] ? _local_bh_enable+0xa0/0xa0 [ 2839.478254][T15641] ? inet_send_prepare+0x1b3/0x260 [ 2839.483396][T15641] ? inet_send_prepare+0x1b3/0x260 [ 2839.488702][T15641] ? inet6_sendmsg+0x5f/0xd0 [ 2839.493463][T15641] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 2839.498953][T15641] ____sys_sendmsg+0x5ba/0x960 [ 2839.503922][T15641] ? __lock_acquire+0x7d40/0x7d40 [ 2839.508973][T15641] ? __sys_sendmsg_sock+0x30/0x30 [ 2839.514329][T15641] ? __import_iovec+0x3fa/0x850 [ 2839.519498][T15641] ? import_iovec+0x73/0xa0 [ 2839.524310][T15641] ___sys_sendmsg+0x2a6/0x360 [ 2839.529670][T15641] ? get_pid_task+0x20/0x1e0 [ 2839.534370][T15641] ? __sys_sendmsg+0x2a0/0x2a0 [ 2839.539266][T15641] ? __lock_acquire+0x7d40/0x7d40 [ 2839.544413][T15641] __se_sys_sendmsg+0x1c2/0x2b0 [ 2839.549271][T15641] ? __x64_sys_sendmsg+0x80/0x80 [ 2839.554397][T15641] ? lockdep_hardirqs_on+0x98/0x150 [ 2839.559611][T15641] do_syscall_64+0x55/0xa0 [ 2839.564285][T15641] ? clear_bhb_loop+0x40/0x90 [ 2839.569052][T15641] ? clear_bhb_loop+0x40/0x90 [ 2839.573726][T15641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2839.579702][T15641] RIP: 0033:0x7f089379c819 [ 2839.584299][T15641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2839.604523][T15641] RSP: 002b:00007f0894672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2839.612942][T15641] RAX: ffffffffffffffda RBX: 00007f0893a15fa0 RCX: 00007f089379c819 [ 2839.621354][T15641] RDX: 000000000000f7e5 RSI: 0000200000000080 RDI: 0000000000000003 [ 2839.629424][T15641] RBP: 00007f0894672090 R08: 0000000000000000 R09: 0000000000000000 [ 2839.637387][T15641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2839.645562][T15641] R13: 00007f0893a16038 R14: 00007f0893a15fa0 R15: 00007ffd7a7765f8 [ 2839.653633][T15641] [ 2840.306354][T15657] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.13408'. [ 2840.547672][T15653] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.13408'. [ 2840.958281][T15673] validate_nla: 5 callbacks suppressed [ 2840.958305][T15673] netlink: 'syz.2.13415': attribute type 11 has an invalid length. [ 2840.980764][T15673] netlink: 176 bytes leftover after parsing attributes in process `syz.2.13415'. [ 2841.107564][T15677] netlink: 'syz.0.13414': attribute type 2 has an invalid length. [ 2841.120699][T15677] netlink: 'syz.0.13414': attribute type 3 has an invalid length. [ 2841.140709][T15677] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13414'. [ 2841.333445][T15681] netlink: 'syz.2.13417': attribute type 11 has an invalid length. [ 2841.890240][T15691] pim6reg1: entered promiscuous mode [ 2841.930728][T15691] pim6reg1: entered allmulticast mode [ 2842.063262][T15696] syzkaller0: entered promiscuous mode [ 2842.068788][T15696] syzkaller0: entered allmulticast mode [ 2846.123670][T15710] netlink: 'syz.1.13427': attribute type 11 has an invalid length. [ 2846.135946][T15716] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13429'. [ 2846.381954][T15733] netlink: 'syz.2.13432': attribute type 11 has an invalid length. [ 2846.803118][T15752] netlink: 'syz.1.13439': attribute type 1 has an invalid length. [ 2846.828344][T15752] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.13439'. [ 2846.850324][T15754] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13440'. [ 2847.459460][T15768] netlink: 'syz.2.13445': attribute type 11 has an invalid length. [ 2847.552273][T15770] netlink: 'syz.1.13443': attribute type 19 has an invalid length. [ 2847.561752][T15770] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.13443'. [ 2847.991107][T15785] netlink: 21 bytes leftover after parsing attributes in process `syz.2.13451'. [ 2848.010412][T15785] ksmbd: Unknown IPC event: 0, ignore. [ 2848.029714][T15793] netlink: 'syz.0.13453': attribute type 1 has an invalid length. [ 2848.287536][T15803] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13456'. [ 2848.479473][T15807] netlink: 'syz.3.13458': attribute type 11 has an invalid length. [ 2849.788104][T15836] syzkaller0: entered promiscuous mode [ 2849.831025][T15836] syzkaller0: entered allmulticast mode [ 2850.271016][T15844] netlink: 'syz.3.13470': attribute type 11 has an invalid length. [ 2850.596384][T15849] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13472'. [ 2850.651535][T15846] delete_channel: no stack [ 2850.708838][T15851] FAULT_INJECTION: forcing a failure. [ 2850.708838][T15851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2850.743557][T15851] CPU: 0 PID: 15851 Comm: syz.1.13473 Not tainted syzkaller #0 [ 2850.751201][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2850.761831][T15851] Call Trace: [ 2850.765794][T15851] [ 2850.768879][T15851] dump_stack_lvl+0x18c/0x250 [ 2850.774212][T15851] ? show_regs_print_info+0x20/0x20 [ 2850.780194][T15851] ? load_image+0x420/0x420 [ 2850.785138][T15851] ? __might_fault+0xaa/0x120 [ 2850.790062][T15851] ? __lock_acquire+0x7d40/0x7d40 [ 2850.795202][T15851] should_fail_ex+0x39d/0x4d0 [ 2850.800243][T15851] _copy_to_user+0x2f/0xa0 [ 2850.804932][T15851] bpf_test_finish+0x4e7/0x650 [ 2850.809805][T15851] ? convert_skb_to___skb+0x420/0x420 [ 2850.815239][T15851] ? read_tsc+0x9/0x20 [ 2850.819496][T15851] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 2850.826089][T15851] ? xdp_convert_buff_to_md+0x200/0x200 [ 2850.831827][T15851] ? __fget_files+0x28/0x4b0 [ 2850.836559][T15851] ? __fget_files+0x28/0x4b0 [ 2850.842022][T15851] ? xdp_convert_buff_to_md+0x200/0x200 [ 2850.847731][T15851] bpf_prog_test_run+0x321/0x390 [ 2850.852943][T15851] __sys_bpf+0x49d/0x890 [ 2850.857350][T15851] ? bpf_link_show_fdinfo+0x390/0x390 [ 2850.862924][T15851] ? lock_chain_count+0x20/0x20 [ 2850.868125][T15851] __x64_sys_bpf+0x7c/0x90 [ 2850.872702][T15851] do_syscall_64+0x55/0xa0 [ 2850.877185][T15851] ? clear_bhb_loop+0x40/0x90 [ 2850.882007][T15851] ? clear_bhb_loop+0x40/0x90 [ 2850.887599][T15851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2850.893730][T15851] RIP: 0033:0x7f961c19c819 [ 2850.898201][T15851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2850.918307][T15851] RSP: 002b:00007f961cf73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2850.927151][T15851] RAX: ffffffffffffffda RBX: 00007f961c415fa0 RCX: 00007f961c19c819 [ 2850.935222][T15851] RDX: 000000000000003a RSI: 0000200000000280 RDI: 000000000000000a [ 2850.943250][T15851] RBP: 00007f961cf73090 R08: 0000000000000000 R09: 0000000000000000 [ 2850.951633][T15851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2850.959666][T15851] R13: 00007f961c416038 R14: 00007f961c415fa0 R15: 00007ffdc9d2b9d8 [ 2850.967837][T15851] [ 2851.145722][T15856] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13474'. [ 2851.349718][T15868] netlink: 'syz.2.13476': attribute type 21 has an invalid length. [ 2851.411663][T15868] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13476'. [ 2851.427370][T15872] netlink: 'syz.2.13476': attribute type 21 has an invalid length. [ 2851.456735][T15872] IPv6: NLM_F_CREATE should be specified when creating new route [ 2851.547865][T15876] netlink: 'syz.3.13481': attribute type 11 has an invalid length. [ 2851.690441][T15880] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.13490'. [ 2851.738463][T15882] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13482'. [ 2852.671141][T15895] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13486'. [ 2852.844560][T15895] syzkaller0: entered promiscuous mode [ 2852.861158][T15895] syzkaller0: entered allmulticast mode [ 2857.176877][T15898] netlink: 'syz.0.13487': attribute type 10 has an invalid length. [ 2857.185800][T15898] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13487'. [ 2857.519840][T15901] netlink: 'syz.0.13487': attribute type 4 has an invalid length. [ 2857.540751][T15911] netlink: 'syz.2.13489': attribute type 11 has an invalid length. [ 2857.706778][T15918] netlink: 'syz.3.13493': attribute type 11 has an invalid length. [ 2857.921668][T15927] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13498'. [ 2858.366344][T15927] syzkaller0: entered promiscuous mode [ 2858.391171][T15927] syzkaller0: entered allmulticast mode [ 2858.405525][T15932] netlink: 'syz.3.13499': attribute type 4 has an invalid length. [ 2858.796595][T15937] FAULT_INJECTION: forcing a failure. [ 2858.796595][T15937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2858.848549][T15937] CPU: 0 PID: 15937 Comm: syz.3.13501 Not tainted syzkaller #0 [ 2858.856299][T15937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2858.866517][T15937] Call Trace: [ 2858.869880][T15937] [ 2858.872892][T15937] dump_stack_lvl+0x18c/0x250 [ 2858.878467][T15937] ? show_regs_print_info+0x20/0x20 [ 2858.883848][T15937] ? load_image+0x420/0x420 [ 2858.888777][T15937] ? lockdep_hardirqs_on+0x98/0x150 [ 2858.894119][T15937] should_fail_ex+0x39d/0x4d0 [ 2858.899699][T15937] _copy_from_iter+0x1d9/0x12e0 [ 2858.904725][T15937] ? __virt_addr_valid+0x18c/0x540 [ 2858.910013][T15937] ? __lock_acquire+0x7d40/0x7d40 [ 2858.915311][T15937] ? copyout_mc+0x70/0x70 [ 2858.920130][T15937] ? __virt_addr_valid+0x18c/0x540 [ 2858.925332][T15937] ? __virt_addr_valid+0x18c/0x540 [ 2858.930723][T15937] ? __virt_addr_valid+0x469/0x540 [ 2858.936289][T15937] ? __check_object_size+0x506/0xa20 [ 2858.941894][T15937] netlink_sendmsg+0x76b/0xbf0 [ 2858.946979][T15937] ? netlink_getsockopt+0x590/0x590 [ 2858.952628][T15937] ? aa_sock_msg_perm+0x94/0x150 [ 2858.959001][T15937] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2858.964473][T15937] ? security_socket_sendmsg+0x80/0xa0 [ 2858.970161][T15937] ? netlink_getsockopt+0x590/0x590 [ 2858.975545][T15937] ____sys_sendmsg+0x5ba/0x960 [ 2858.980547][T15937] ? __asan_memset+0x22/0x40 [ 2858.986112][T15937] ? __sys_sendmsg_sock+0x30/0x30 [ 2858.991571][T15937] ? __import_iovec+0x5f2/0x850 [ 2858.996926][T15937] ? import_iovec+0x73/0xa0 [ 2859.001872][T15937] ___sys_sendmsg+0x2a6/0x360 [ 2859.007268][T15937] ? __sys_sendmsg+0x2a0/0x2a0 [ 2859.012606][T15937] __se_sys_sendmsg+0x1c2/0x2b0 [ 2859.017814][T15937] ? __x64_sys_sendmsg+0x80/0x80 [ 2859.023262][T15937] do_syscall_64+0x55/0xa0 [ 2859.027878][T15937] ? clear_bhb_loop+0x40/0x90 [ 2859.032912][T15937] ? clear_bhb_loop+0x40/0x90 [ 2859.038036][T15937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2859.044096][T15937] RIP: 0033:0x7f089379c819 [ 2859.048687][T15937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2859.069169][T15937] RSP: 002b:00007f0894672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2859.077995][T15937] RAX: ffffffffffffffda RBX: 00007f0893a15fa0 RCX: 00007f089379c819 [ 2859.086211][T15937] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2859.094864][T15937] RBP: 00007f0894672090 R08: 0000000000000000 R09: 0000000000000000 [ 2859.103176][T15937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2859.111381][T15937] R13: 00007f0893a16038 R14: 00007f0893a15fa0 R15: 00007ffd7a7765f8 [ 2859.119921][T15937] [ 2862.485007][T15941] veth1_macvtap: left promiscuous mode [ 2862.491053][T15941] macsec0: entered allmulticast mode [ 2862.643460][T15950] netlink: 'syz.0.13506': attribute type 11 has an invalid length. [ 2862.696101][T15952] netlink: 'syz.2.13508': attribute type 11 has an invalid length. [ 2863.485840][T15964] netlink: 'syz.0.13512': attribute type 7 has an invalid length. [ 2863.691108][T15959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2863.779655][T15972] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13515'. [ 2863.813022][T15972] openvswitch: netlink: Key type 4112 is out of range max 32 [ 2865.069111][T15992] netlink: 'syz.2.13520': attribute type 29 has an invalid length. [ 2867.333035][T15983] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13519'. [ 2867.372215][T15992] netlink: 'syz.2.13520': attribute type 29 has an invalid length. [ 2867.521088][T16000] netlink: 'syz.0.13523': attribute type 11 has an invalid length. [ 2867.686951][T16011] netlink: 'syz.0.13527': attribute type 8 has an invalid length. [ 2867.696274][T16011] netlink: 156 bytes leftover after parsing attributes in process `syz.0.13527'. [ 2867.734727][T16011] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13527'. [ 2867.953189][T16011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2868.427197][T16011] bridge_slave_0 (unregistering): left allmulticast mode [ 2868.436856][T16011] bridge_slave_0 (unregistering): left promiscuous mode [ 2868.454512][T16011] bridge0: port 1(bridge_slave_0) entered disabled state [ 2868.490776][T16006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2868.575671][T16013] netlink: 'syz.2.13526': attribute type 7 has an invalid length. [ 2868.707848][T16022] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13529'. [ 2868.734400][T16024] netlink: 'syz.2.13530': attribute type 10 has an invalid length. [ 2868.745614][T16024] hsr_slave_0: left promiscuous mode [ 2868.764255][T16024] hsr_slave_1: left promiscuous mode [ 2868.917870][T16028] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13531'. [ 2869.092272][T16022] syzkaller0: entered promiscuous mode [ 2869.098548][T16022] syzkaller0: entered allmulticast mode [ 2869.238020][T16028] syzkaller0: entered promiscuous mode [ 2869.245052][T16028] syzkaller0: entered allmulticast mode [ 2878.287360][T16054] netlink: 'syz.3.13537': attribute type 11 has an invalid length. [ 2878.407790][T16058] netlink: 'syz.2.13538': attribute type 29 has an invalid length. [ 2878.431186][T16058] netlink: 'syz.2.13538': attribute type 29 has an invalid length. [ 2878.465162][T16058] netlink: 'syz.2.13538': attribute type 29 has an invalid length. [ 2878.572199][T16066] netlink: 'syz.3.13539': attribute type 7 has an invalid length. [ 2878.672070][T16067] netlink: 'syz.0.13541': attribute type 29 has an invalid length. [ 2878.758451][T16067] netlink: 'syz.0.13541': attribute type 29 has an invalid length. [ 2878.833926][T16069] netlink: 'syz.0.13541': attribute type 29 has an invalid length. [ 2878.851329][T16071] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.13542'. [ 2878.898599][T16072] netlink: 'syz.0.13541': attribute type 29 has an invalid length. [ 2879.024797][T16067] netlink: 'syz.0.13541': attribute type 29 has an invalid length. [ 2879.277886][T16059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2879.752231][T16089] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.13546'. [ 2879.765468][T16089] openvswitch: netlink: Message has 4 unknown bytes. [ 2880.241221][T16111] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.13554'. [ 2880.844493][T16102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2881.330514][T16128] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.13562'. [ 2881.352115][T16128] openvswitch: netlink: Message has 4 unknown bytes. [ 2882.412120][T16141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2884.980961][T16160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2887.751125][T16162] validate_nla: 8 callbacks suppressed [ 2887.751146][T16162] netlink: 'syz.0.13576': attribute type 7 has an invalid length. [ 2888.031820][T16165] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.13570'. [ 2888.082382][T16174] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.13574'. [ 2890.464803][T16195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2893.749119][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13580'. [ 2893.772911][T16198] netlink: 'syz.0.13581': attribute type 7 has an invalid length. [ 2893.789730][T16201] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.13583'. [ 2894.111665][T16215] FAULT_INJECTION: forcing a failure. [ 2894.111665][T16215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2894.171066][T16215] CPU: 0 PID: 16215 Comm: syz.1.13588 Not tainted syzkaller #0 [ 2894.178767][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2894.188853][T16215] Call Trace: [ 2894.192155][T16215] [ 2894.195286][T16215] dump_stack_lvl+0x18c/0x250 [ 2894.200023][T16215] ? show_regs_print_info+0x20/0x20 [ 2894.205259][T16215] ? load_image+0x420/0x420 [ 2894.209800][T16215] ? __lock_acquire+0x7d40/0x7d40 [ 2894.215615][T16215] ? snprintf+0xe9/0x140 [ 2894.220388][T16215] should_fail_ex+0x39d/0x4d0 [ 2894.225516][T16215] _copy_to_user+0x2f/0xa0 [ 2894.231130][T16215] simple_read_from_buffer+0xe7/0x150 [ 2894.237334][T16215] proc_fail_nth_read+0x1e8/0x260 [ 2894.242841][T16215] ? proc_fault_inject_write+0x360/0x360 [ 2894.249809][T16215] ? fsnotify_perm+0x271/0x5e0 [ 2894.255219][T16215] ? proc_fault_inject_write+0x360/0x360 [ 2894.261310][T16215] vfs_read+0x28b/0x970 [ 2894.265657][T16215] ? kernel_read+0x1e0/0x1e0 [ 2894.270361][T16215] ? __fget_files+0x28/0x4b0 [ 2894.275174][T16215] ? __fget_files+0x28/0x4b0 [ 2894.280214][T16215] ? __fget_files+0x43d/0x4b0 [ 2894.285350][T16215] ? __fdget_pos+0x2a3/0x330 [ 2894.290187][T16215] ? ksys_read+0x75/0x260 [ 2894.295061][T16215] ksys_read+0x150/0x260 [ 2894.299524][T16215] ? vfs_write+0x990/0x990 [ 2894.304961][T16215] ? lockdep_hardirqs_on+0x98/0x150 [ 2894.311429][T16215] do_syscall_64+0x55/0xa0 [ 2894.316224][T16215] ? clear_bhb_loop+0x40/0x90 [ 2894.321529][T16215] ? clear_bhb_loop+0x40/0x90 [ 2894.326449][T16215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2894.333509][T16215] RIP: 0033:0x7f961c15d04e [ 2894.337924][T16215] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2894.358781][T16215] RSP: 002b:00007f961cf72fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2894.367220][T16215] RAX: ffffffffffffffda RBX: 00007f961cf736c0 RCX: 00007f961c15d04e [ 2894.375556][T16215] RDX: 000000000000000f RSI: 00007f961cf730a0 RDI: 000000000000000e [ 2894.384694][T16215] RBP: 00007f961cf73090 R08: 0000000000000000 R09: 0000000000000000 [ 2894.395745][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2894.405919][T16215] R13: 00007f961c416038 R14: 00007f961c415fa0 R15: 00007ffdc9d2b9d8 [ 2894.415440][T16215] [ 2894.589835][T16226] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13592'. [ 2894.632150][T16226] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 2894.718390][T16229] syzkaller0: entered promiscuous mode [ 2894.728626][T16229] syzkaller0: entered allmulticast mode [ 2894.934712][T16237] delete_channel: no stack [ 2894.940465][T16237] delete_channel: no stack [ 2895.585068][T16231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2898.082673][T16235] netlink: 'syz.2.13594': attribute type 7 has an invalid length. [ 2898.221122][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.228098][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2898.536216][T16269] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.13607'. [ 2899.513859][T16281] netlink: 'syz.3.13612': attribute type 7 has an invalid length. [ 2899.659358][T16287] netlink: 'syz.0.13611': attribute type 7 has an invalid length. [ 2899.837727][T16291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13615'. [ 2900.272809][T16278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2900.661436][T16293] delete_channel: no stack [ 2900.676465][T16296] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.13617'. [ 2900.693275][T16296] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 2900.737679][T16296] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.13617'. [ 2900.787202][T16300] syzkaller0: entered promiscuous mode [ 2900.891347][T16300] syzkaller0: entered allmulticast mode [ 2901.144654][T16312] netlink: 'syz.1.13620': attribute type 1 has an invalid length. [ 2905.084801][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13631'. [ 2905.098051][T16324] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13624'. [ 2905.219084][T16338] FAULT_INJECTION: forcing a failure. [ 2905.219084][T16338] name failslab, interval 1, probability 0, space 0, times 0 [ 2905.238936][T16338] CPU: 1 PID: 16338 Comm: syz.0.13627 Not tainted syzkaller #0 [ 2905.246891][T16338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2905.257150][T16338] Call Trace: [ 2905.260500][T16338] [ 2905.263457][T16338] dump_stack_lvl+0x18c/0x250 [ 2905.268364][T16338] ? show_regs_print_info+0x20/0x20 [ 2905.273605][T16338] ? load_image+0x420/0x420 [ 2905.278319][T16338] ? __might_sleep+0xe0/0xe0 [ 2905.283123][T16338] ? __lock_acquire+0x7d40/0x7d40 [ 2905.288414][T16338] should_fail_ex+0x39d/0x4d0 [ 2905.293155][T16338] should_failslab+0x9/0x20 [ 2905.297789][T16338] slab_pre_alloc_hook+0x59/0x310 [ 2905.302870][T16338] ? subflow_ulp_init+0x95/0x530 [ 2905.307848][T16338] __kmem_cache_alloc_node+0x53/0x250 [ 2905.313554][T16338] ? tcp_set_ulp+0xb1/0x5f0 [ 2905.318097][T16338] ? subflow_ulp_init+0x95/0x530 [ 2905.323339][T16338] kmalloc_trace+0x2a/0xe0 [ 2905.327855][T16338] subflow_ulp_init+0x95/0x530 [ 2905.332946][T16338] ? tcp_set_ulp+0xb1/0x5f0 [ 2905.337656][T16338] tcp_set_ulp+0x536/0x5f0 [ 2905.342358][T16338] mptcp_subflow_create_socket+0x60e/0xac0 [ 2905.348463][T16338] ? mark_lock+0x94/0x320 [ 2905.352798][T16338] ? __mptcp_subflow_connect+0x1450/0x1450 [ 2905.358639][T16338] ? lock_chain_count+0x20/0x20 [ 2905.363602][T16338] __mptcp_nmpc_sk+0x157/0x740 [ 2905.368378][T16338] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2905.373922][T16338] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 2905.380949][T16338] mptcp_setsockopt+0xe7a/0x3390 [ 2905.385893][T16338] ? __fget_files+0x28/0x4b0 [ 2905.390621][T16338] ? pm_nl_exit_net+0x230/0x230 [ 2905.395738][T16338] ? aa_af_perm+0x330/0x330 [ 2905.400336][T16338] ? __fget_files+0x28/0x4b0 [ 2905.405100][T16338] ? __fget_files+0x28/0x4b0 [ 2905.409863][T16338] ? aa_sock_opt_perm+0x74/0x100 [ 2905.414985][T16338] ? sock_common_setsockopt+0x36/0xc0 [ 2905.420811][T16338] ? sock_common_recvmsg+0x190/0x190 [ 2905.426295][T16338] do_sock_setsockopt+0x175/0x1a0 [ 2905.431325][T16338] ? __fdget+0x180/0x210 [ 2905.435657][T16338] __x64_sys_setsockopt+0x182/0x200 [ 2905.440939][T16338] do_syscall_64+0x55/0xa0 [ 2905.445526][T16338] ? clear_bhb_loop+0x40/0x90 [ 2905.450396][T16338] ? clear_bhb_loop+0x40/0x90 [ 2905.455255][T16338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2905.461335][T16338] RIP: 0033:0x7fd518b9c819 [ 2905.466133][T16338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2905.487296][T16338] RSP: 002b:00007fd51998f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2905.496072][T16338] RAX: ffffffffffffffda RBX: 00007fd518e15fa0 RCX: 00007fd518b9c819 [ 2905.504141][T16338] RDX: 000000000000004b RSI: 0000000000000029 RDI: 0000000000000003 [ 2905.512210][T16338] RBP: 00007fd51998f090 R08: 0000000000000000 R09: 0000000000000000 [ 2905.520194][T16338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2905.528342][T16338] R13: 00007fd518e16038 R14: 00007fd518e15fa0 R15: 00007fff46b12ae8 [ 2905.536532][T16338] [ 2905.964377][T16356] netlink: 'syz.1.13634': attribute type 29 has an invalid length. [ 2905.992000][T16356] netlink: 'syz.1.13634': attribute type 29 has an invalid length. [ 2906.081147][T16358] netlink: 'syz.1.13634': attribute type 29 has an invalid length. [ 2906.472637][T16362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13636'. [ 2906.781984][T16372] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13638'. [ 2907.107043][T16372] syzkaller0: entered promiscuous mode [ 2907.126895][T16372] syzkaller0: entered allmulticast mode [ 2907.143151][ T9809] syzkaller0: tun_net_xmit 48 [ 2909.996123][T16397] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.13644'. [ 2911.146380][T16404] netlink: 'syz.0.13646': attribute type 29 has an invalid length. [ 2911.163280][T16404] netlink: 'syz.0.13646': attribute type 29 has an invalid length. [ 2911.177654][T16404] netlink: 'syz.0.13646': attribute type 29 has an invalid length. [ 2912.366760][T16428] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13656'. [ 2912.462380][T16431] netlink: 'syz.2.13658': attribute type 29 has an invalid length. [ 2912.486597][T16431] netlink: 'syz.2.13658': attribute type 29 has an invalid length. [ 2912.640358][T16428] syzkaller0: entered promiscuous mode [ 2912.664294][T16428] syzkaller0: entered allmulticast mode [ 2912.683965][ T9809] syzkaller0: tun_net_xmit 48 [ 2912.888280][T16437] netlink: 'syz.3.13659': attribute type 29 has an invalid length. [ 2918.494186][T16437] netlink: 'syz.3.13659': attribute type 29 has an invalid length. [ 2919.118584][T16465] netlink: 'syz.3.13671': attribute type 1 has an invalid length. [ 2919.140831][T16465] netlink: 'syz.3.13671': attribute type 3 has an invalid length. [ 2919.145913][T16469] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13672'. [ 2919.149067][T16465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13671'. [ 2919.199779][T16472] netlink: 'syz.3.13671': attribute type 10 has an invalid length. [ 2919.222951][T16472] netlink: 168 bytes leftover after parsing attributes in process `syz.3.13671'. [ 2919.295127][T16467] netlink: 'syz.0.13673': attribute type 10 has an invalid length. [ 2919.522235][T16469] syzkaller0: entered promiscuous mode [ 2919.550804][T16469] syzkaller0: entered allmulticast mode [ 2919.585451][ T9809] syzkaller0: tun_net_xmit 48 [ 2923.885192][T16497] netlink: 'syz.1.13682': attribute type 21 has an invalid length. [ 2923.893781][T16497] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13682'. [ 2923.922960][T16497] netlink: 'syz.1.13682': attribute type 4 has an invalid length. [ 2923.940171][T16497] netlink: 'syz.1.13682': attribute type 5 has an invalid length. [ 2923.948748][T16497] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13682'. [ 2924.239959][T16517] netlink: 'syz.0.13687': attribute type 1 has an invalid length. [ 2924.258593][T16517] netlink: 'syz.0.13687': attribute type 3 has an invalid length. [ 2924.277998][T16519] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.13690'. [ 2924.281758][T16517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13687'. [ 2924.367412][T16517] netlink: 'syz.0.13687': attribute type 10 has an invalid length. [ 2924.391863][T16517] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13687'. [ 2924.615744][T16529] macvlan1: entered promiscuous mode [ 2924.626307][T16529] macvlan1: entered allmulticast mode [ 2924.634093][T16529] veth1_vlan: entered allmulticast mode [ 2924.904207][T16539] netlink: 184 bytes leftover after parsing attributes in process `syz.3.13697'. [ 2925.095357][T16539] syzkaller0: entered promiscuous mode [ 2925.121420][T16539] syzkaller0: entered allmulticast mode [ 2925.141199][T16543] netlink: 'syz.2.13699': attribute type 21 has an invalid length. [ 2925.150319][ T9809] syzkaller0: tun_net_xmit 48 [ 2925.319794][T16548] netlink: 'syz.2.13699': attribute type 3 has an invalid length. [ 2925.391461][T16548] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13699'. [ 2934.347621][T16584] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2934.355470][T16584] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2934.613678][T16600] netlink: 184 bytes leftover after parsing attributes in process `syz.0.13718'. [ 2934.852951][T16600] syzkaller0: entered promiscuous mode [ 2934.861711][T16600] syzkaller0: entered allmulticast mode [ 2934.877155][T24082] syzkaller0: tun_net_xmit 48 [ 2935.181849][T16609] FAULT_INJECTION: forcing a failure. [ 2935.181849][T16609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2935.196755][T16609] CPU: 1 PID: 16609 Comm: syz.2.13723 Not tainted syzkaller #0 [ 2935.205090][T16609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2935.215567][T16609] Call Trace: [ 2935.219276][T16609] [ 2935.222541][T16609] dump_stack_lvl+0x18c/0x250 [ 2935.228212][T16609] ? show_regs_print_info+0x20/0x20 [ 2935.234551][T16609] ? load_image+0x420/0x420 [ 2935.241672][T16609] ? __lock_acquire+0x7d40/0x7d40 [ 2935.247202][T16609] ? snprintf+0xe9/0x140 [ 2935.252368][T16609] should_fail_ex+0x39d/0x4d0 [ 2935.257394][T16609] _copy_to_user+0x2f/0xa0 [ 2935.262041][T16609] simple_read_from_buffer+0xe7/0x150 [ 2935.268212][T16609] proc_fail_nth_read+0x1e8/0x260 [ 2935.273430][T16609] ? proc_fault_inject_write+0x360/0x360 [ 2935.279562][T16609] ? fsnotify_perm+0x271/0x5e0 [ 2935.285161][T16609] ? proc_fault_inject_write+0x360/0x360 [ 2935.291778][T16609] vfs_read+0x28b/0x970 [ 2935.297245][T16609] ? kernel_read+0x1e0/0x1e0 [ 2935.302500][T16609] ? __fget_files+0x28/0x4b0 [ 2935.307581][T16609] ? __fget_files+0x28/0x4b0 [ 2935.312491][T16609] ? __fget_files+0x43d/0x4b0 [ 2935.317243][T16609] ? __fdget_pos+0x2a3/0x330 [ 2935.321875][T16609] ? ksys_read+0x75/0x260 [ 2935.327292][T16609] ksys_read+0x150/0x260 [ 2935.331726][T16609] ? vfs_write+0x990/0x990 [ 2935.337084][T16609] ? lockdep_hardirqs_on+0x98/0x150 [ 2935.342820][T16609] do_syscall_64+0x55/0xa0 [ 2935.348763][T16609] ? clear_bhb_loop+0x40/0x90 [ 2935.353908][T16609] ? clear_bhb_loop+0x40/0x90 [ 2935.358995][T16609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2935.365721][T16609] RIP: 0033:0x7f7fcbb5d04e [ 2935.370422][T16609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2935.393473][T16609] RSP: 002b:00007f7fcc9ecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2935.404229][T16609] RAX: ffffffffffffffda RBX: 00007f7fcc9ed6c0 RCX: 00007f7fcbb5d04e [ 2935.413204][T16609] RDX: 000000000000000f RSI: 00007f7fcc9ed0a0 RDI: 0000000000000005 [ 2935.422309][T16609] RBP: 00007f7fcc9ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2935.431042][T16609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2935.440046][T16609] R13: 00007f7fcbe16038 R14: 00007f7fcbe15fa0 R15: 00007ffdb86ca1e8 [ 2935.449177][T16609] [ 2936.141456][T14983] Bluetooth: hci4: command 0x0406 tx timeout [ 2936.763072][T16615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2939.104998][T16616] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13726'. [ 2939.123462][T16619] netlink: 'syz.2.13725': attribute type 7 has an invalid length. [ 2939.568511][T16652] netlink: 'syz.2.13736': attribute type 7 has an invalid length. [ 2940.071614][T16656] netlink: 184 bytes leftover after parsing attributes in process `syz.1.13739'. [ 2940.315591][T16646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2940.520289][T16660] syzkaller0: entered promiscuous mode [ 2940.531194][T16660] syzkaller0: entered allmulticast mode [ 2940.548736][ T3198] syzkaller0: tun_net_xmit 48 [ 2941.602897][T16681] netlink: 'syz.3.13744': attribute type 10 has an invalid length. [ 2945.042254][T16681] netlink: 'syz.3.13744': attribute type 10 has an invalid length. [ 2945.078588][T16684] netlink: 'syz.2.13747': attribute type 10 has an invalid length. [ 2945.087669][T16684] bridge0: left promiscuous mode [ 2945.105336][T16684] bridge0: port 3(veth0_to_bridge) entered blocking state [ 2945.113824][T16684] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 2945.125313][T16684] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.133555][T16684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2945.141539][T16684] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.148818][T16684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2945.205958][T16684] team0: Port device bridge0 added [ 2945.231444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.244377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.257139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.270088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.271177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.283146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.296507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.308516][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.322250][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2945.334042][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.240784][ C1] net_ratelimit: 27149 callbacks suppressed [ 2950.240809][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.241155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.248169][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.261051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.273383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.286068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.299958][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.314171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.327123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2950.340341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.250639][ C0] net_ratelimit: 24934 callbacks suppressed [ 2955.250664][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.251476][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.257403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.269583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.282243][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.295949][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.308657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.321507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.333603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2955.345705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2959.826425][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.845448][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.260686][ C0] net_ratelimit: 20990 callbacks suppressed [ 2960.260707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.260846][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.267154][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.279457][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.291849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.304267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.317128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.329234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.341440][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2960.353492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.270665][ C0] net_ratelimit: 24016 callbacks suppressed [ 2965.270686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.270947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.278267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.292693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.306520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.322499][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.338716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.354454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.369246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2965.383788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.280681][ C0] net_ratelimit: 25116 callbacks suppressed [ 2970.280699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.280786][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.287353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.299867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.313486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.325775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.338220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.350389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.362593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2970.375215][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.290650][ C0] net_ratelimit: 24934 callbacks suppressed [ 2975.290676][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.290832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.297035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.309384][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.321671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.333800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.347127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.360892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.374730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2975.390960][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.301095][ C0] net_ratelimit: 24656 callbacks suppressed [ 2980.301115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.301145][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.301713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.308373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.322881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.335289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.347828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.360344][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.374099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2980.387024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.310877][ C1] net_ratelimit: 25428 callbacks suppressed [ 2985.310900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.311171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.317268][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.330602][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.342796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.355453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.367644][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.380128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.392606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2985.405094][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.320669][ C0] net_ratelimit: 24881 callbacks suppressed [ 2990.320688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.320715][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.327251][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.339324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.351907][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.364678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.377019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.389222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.401441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2990.413687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.330660][ C1] net_ratelimit: 23949 callbacks suppressed [ 2995.330685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.330818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.337553][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.350490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.362547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.375670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.388818][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.402004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.414617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2995.428368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.340626][ C0] net_ratelimit: 19622 callbacks suppressed [ 3000.340647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.341017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.347198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.360127][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.372239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.385226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.396403][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.409796][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.421492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3000.434564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.350983][ C0] net_ratelimit: 15447 callbacks suppressed [ 3005.351005][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.351078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.359371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.376737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.391426][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.404571][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.419646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.432351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.446382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3005.460208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3010.360646][ C1] net_ratelimit: 23735 callbacks suppressed [ 3010.360665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.360672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.361084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.367328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.379579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.391891][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.403991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.416824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.429648][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3010.443317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.370665][ C1] net_ratelimit: 24507 callbacks suppressed [ 3015.370687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.370888][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.378203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.392298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.409088][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.426144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.441937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.459929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.476369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3015.499195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)